DCS Labs · Technology · Post-quantum

Signed today. Valid in the quantum era.

A quantum computer large enough to break RSA and elliptic curves does not need to exist yet to cause harm: anything recorded or signed today with classical cryptography alone is already on a clock. Every R-Series receipt is signed twice, classically and post-quantum.

Classical legEd25519 · RFC 8032
Post-quantum legML-DSA-65 · FIPS 204
Defence profileML-DSA-87 · In development
01 The threat

Harvest now. Decrypt later.

Traffic, backups and signed archives are copied today and kept. When a cryptographically relevant quantum computer arrives, keys protected only by RSA or elliptic curves can be recovered, and signatures made with them can be forged after the fact. Records that must stay trustworthy for decades need a post-quantum leg now.

02 Our choice

Hybrid, so neither leg has to be trusted alone.

DEFAULT

Ed25519 + ML-DSA-65

Every R-Series receipt carries both. ML-DSA-65 is the module-lattice signature standardised in NIST FIPS 204 at security category 3. A verifier refuses a receipt missing either signature.

DEFENCE PROFILE

Ed25519 + ML-DSA-87

For forces and systems that need the highest category, the same receipt format with ML-DSA-87, chosen per deployment. In development

LINKS

Hybrid key exchange

Where a link carries secrets, a hybrid exchange (X25519 with ML-KEM-768, FIPS 203) protects the session, so recorded traffic stays closed.

Want the full technical picture? Architecture, live demonstrations and detailed status are shared in a private technical briefing, under NDA. Write to hello@dcslabs.ai.

Request a technical briefing