{
  "id": 19655311,
  "title": "Why I chose a hybrid post-quantum design (ML-KEM-768 + X25519) for encrypted cloud storage",
  "url": "https://urgent.news/2026/11/12/why-i-chose-a-hybrid-post-quantum-design-ml-kem-768-x25519-for",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-12T13:34:33.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/deemanth/why-i-chose-a-hybrid-post-quantum-design-ml-kem-768-x25519-for-encrypted-cloud-storage-1fob"
  },
  "original_language": "en",
  "account": "SecVault, a zero-knowledge encrypted cloud storage service, employs a hybrid post-quantum design (ML-KEM-768 + X25519) for safeguarding user data. This choice stems from the recognition that encrypted files exist for extended periods, posing a risk if a quantum computer's capabilities advance further. To counter this threat, SecVault implemented a hybrid key encapsulation mechanism (KEM), combining ML-KEM-768, which is new and currently non-quantum-resistant, with the battle-tested X25519. Additionally, the service utilizes hybrid signatures (ML-DSA-65 + Ed25519) and AES-256-GCM for file encryption, carried out on the user's device. Argon2id, another cryptographic algorithm, is employed to transform user passwords into encryption keys. Unlike traditional cloud storage services, SecVault enables users to revoke access to their files, and data is stored in Amsterdam, EU. However, it is crucial to note that this service has not undergone an independent audit nor is it open-source. Currently, SecVault is only accessible via waitlist, offering a Founding Pass that grants users 100 GB of free storage for six months.",
  "summary": "I'm building SecVault, a zero-knowledge encrypted cloud storage service. Files are encrypted on your device before upload, so the server never sees plaintext. Here's why I picked a hybrid post-quantum design, and what it does and doesn't give you. The threat: harvest now, decrypt later Cloud files live for years. An attacker who records encrypted data today could decrypt it later if a quantum…",
  "key_points": [
    "SecVault uses hybrid post-quantum design (ML-KEM-768 + X25519) for encrypted cloud storage.",
    "Hybrid key encapsulation mechanism combines new ML-KEM-768 with battle-tested X25519.",
    "Service offers file encryption, access revocation, and EU-based data storage."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}