Quantum-Safe Review
What breaks, what does not, what to change first.
A time-boxed, evidence-backed review of how a codebase uses cryptography today and what a migration needs.
What is reviewed
Six parts.
- Inventory and CBOM in CycloneDX 1.6, across Rust, Go, Python, JS/TS, Solidity, Noir and Circom, including ZK proof-system exposure.
- Rule evaluation against the PQ, Noir and Circom rule sets.
- Conformance of the PQ implementation you use: ML-KEM-512/768/1024, ML-DSA-44/65/87 and SLH-DSA, against pinned NIST ACVP v1.1.0.43 and Wycheproof (d17cc89f) vectors, per test case.
- Strictness: malformed lengths, non-canonical encodings, modulus and hash checks, differential testing against independent implementations, a seeded fuzz campaign.
- Timing screen for decapsulation and signing (screening only, not a constant-time proof).
- Scoring, roadmap and an evidence bundle with a SHA-256 manifest and reproducible replay.
This is conformance-tested against NIST ACVP vectors. It is not a certification, a FIPS 140-3 validation or a CAVP/CMVP result.
Tiers
Pick the depth.
| Quick | Standard | Enterprise | |
|---|---|---|---|
| Purpose | Triage / qualification | Pre-release review | Procurement-grade evidence |
| Vectors | 2 cases per group, ACVP | 10 per group, ACVP + Wycheproof | Every case, ACVP + Wycheproof |
| Differential / fuzz | Small | 1,000 fuzz iterations | 5,000+ iterations (or timed) |
| Timing screen | No | Yes | Yes, 20,000 samples |
| Human review | Report check | Engineer review of findings | Engineer review, architecture interview, readout call |
| Calendar time | 1 day | 1-2 weeks | 3-5 weeks |
| Price | Quoted per scope | Quoted per scope | Quoted per scope |
Combined ZK and post-quantum reviews are priced on the pricing page.
Deliverables and limits
What you keep, and what is out of scope.
Deliverables: report (Markdown, HTML, PDF-ready HTML), SARIF, CBOM, per-test JSON, raw logs, an inputs manifest (commit hash, tool versions, vector lock), a SHA-256 manifest, an optional cosign signature (a hook you run), and one retest.
Not included: protocol or circuit soundness audit (that is the pre-audit), hardware or fault attacks, FIPS 140-3 module validation, legal or regulatory advice, or any guarantee of absence of defects.
Confidentiality: source is analysed locally; nothing is uploaded to a third party without written consent.