{
  "id": 4253813,
  "title": "Quipu: post-quantum encryption in pure Rust, with a Python wheel",
  "url": "https://urgent.news/2026/08/29/quipu-post-quantum-encryption-in-pure-rust-with-a-python-wheel",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-29T18:37:43.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/isazajuancarlos/quipu-post-quantum-encryption-in-pure-rust-with-a-python-wheel-3lm"
  },
  "original_language": "en",
  "account": "Quipu is a free hybrid post-quantum encryption library for data at rest, combining classical cryptography with quantum-resistant methods to ensure security against future threats. Written in pure Rust, the library offers memory safety, eliminating the need for a garbage collector or first-party unsafe features. For those who prefer Python, Quipu provides a native Python wheel via PyO3, streamlining the installation process and eliminating the need for multiple bindings.\n\nThe library utilizes well-established encryption algorithms, such as XChaCha20-Poly1305 for authenticated encryption, Argon2id for key derivation, and X25519 + ML-KEM-1024 for post-quantum key exchange, along with Ed25519 + ML-DSA-87 for signatures. With a security level equivalent to NIST category 5 (CNSA 2.0), Quipu adheres to standard, verified primitives, ensuring a reliable defense against both classical and quantum attacks.\n\nDespite its impressive features, Quipu is currently not independently audited, meaning users should treat it as software for review and experimentation rather than a secure solution for high-value secrets. The source code is freely available on GitHub, allowing users to audit the format and composition of Quipu. The library is openly licensed under AGPL-3.0, with documentation provided on crates.io and PyPI, enabling easy installation and adoption across different programming environments.",
  "summary": "Protecting data that must stay secret ten years from now is a problem for today : an adversary can capture your encrypted traffic now and decrypt it once quantum capability exists ( harvest now, decrypt later ). Quipu is a free hybrid post-quantum encryption library for data at rest: it combines proven classical cryptography with the new kind, so that it only breaks if both fall at once. Pure…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Dev.to",
        "title": "Don't just return results — show users WHY they matched (highlighting in pure Python)",
        "url": "https://urgent.news/2026/08/28/dont-just-return-results-show-users-why-they-matched-highlighting-in",
        "published": "2026-08-28T16:36:25.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}