# Post Quantum Crypto Poc

> Post-Quantum Cryptography (PQC) Integration

- Skill: `j4flmao/post-quantum-crypto-poc` (Agent Skill)
- Install (CLI): `npx skillmds@latest add j4flmao/post-quantum-crypto-poc`
- Raw SKILL.md: https://api.skillmd.com/api/skills/j4flmao/post-quantum-crypto-poc/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: j4flmao (https://skillmd.com/u/j4flmao)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/j4flmao/post-quantum-crypto-poc

---

# Post-Quantum Cryptography (PQC) Integration

## PoC Architecture Design

This PoC outlines the integration of Post-Quantum Cryptographic algorithms (such as Kyber and Dilithium) into modern TLS tunnels to resist future "Harvest Now, Decrypt Later" attacks by quantum computers.

### Core Mechanics
1. **Lattice-Based Cryptography:** Algorithms like CRYSTALS-Kyber rely on the hardness of the Learning With Errors (LWE) problem, which is believed to be resistant to Shor's Algorithm.
2. **Hybrid Key Exchange (KEM):** Modern TLS 1.3 handshakes combine traditional Elliptic Curve Diffie-Hellman (X25519) with a PQC KEM (Kyber) to derive the session key. If the PQC algorithm is broken, the ECC security remains.
3. **Post-Quantum Signatures:** Using CRYSTALS-Dilithium for certificate signing and authentication, replacing RSA or ECDSA.

### Architecture Map

```mermaid
%%{init: {"theme": "default", "flowchart": {"useMaxWidth": true}}}%%
flowchart TD
    subgraph Client ["Client Protocol"]
        A["ClientHello"]
        B["Generate X25519 Share"]
        C["Generate Kyber Encapsulation"]
    end
    
    subgraph Server ["Server Protocol"]
        D["ServerHello"]
        E["X25519 Key Derivation"]
        F["Kyber Decapsulation"]
        G["Sign with Dilithium"]
    end
    
    subgraph KeyGen ["Session Key (KDF)"]
        H["Hybrid Master Secret"]
        I["AES-GCM Tunnel"]
    end
    
    A --> B
    A --> C
    B -->|"Send Share"| D
    C -->|"Send Ciphertext"| D
    D --> E
    D --> F
    E --> H
    F --> H
    D --> G
    G -->|"Send Certificate"| A
    H --> I
```