qssh 0.4.4

Post-quantum secure shell with NIST PQC algorithms (Falcon, SPHINCS+, ML-KEM), configurable security tiers, and quantum-resistant protocol design
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

# QSSH Container Build Targets
IMAGE := paraxiom/qssh
TAG   := latest

.PHONY: build build-hardened run stop test-connect compose-up compose-down keygen clean deb deb-cross

# Default cross target for `make deb-cross`
TARGET ?= x86_64-unknown-linux-gnu

## Build a Debian .deb (Linux host only; needs: cargo install cargo-deb)
deb:
	cargo deb

## Cross-build the .deb for $(TARGET) (e.g. make deb-cross TARGET=aarch64-unknown-linux-gnu)
deb-cross:
	cargo deb --target $(TARGET)

## Build standard image
build:
	docker build -t $(IMAGE):$(TAG) .

## Build hardened image (quantum-native frames, no hybrid)
build-hardened:
	docker build -t $(IMAGE):hardened \
		--build-arg FEATURES="sftp,quantum-native" .

## Build custom per-org image (example: T3 minimum, Falcon-only)
build-custom:
	docker build -t $(IMAGE):custom \
		--build-arg FEATURES="sftp,quantum-native" \
		--build-arg STRIP="true" .

## Generate PQ keypair on host
keygen:
	docker run --rm -v $$(pwd)/keys:/keys $(IMAGE):$(TAG) \
		qssh-keygen -t falcon512 -f /keys/id_falcon

## Run qsshd server
run:
	docker run -d --name qsshd \
		-p 22222:22222 \
		-v $$(pwd)/keys:/etc/qssh \
		$(IMAGE):$(TAG)

## Stop and remove server
stop:
	docker rm -f qsshd 2>/dev/null || true

## Test connection to running server
test-connect:
	docker run --rm --network host $(IMAGE):$(TAG) \
		qssh -p 22222 localhost

## Start full stack (server + client)
compose-up:
	docker compose up -d

## Start with QKD simulator
compose-qkd:
	docker compose --profile qkd up -d

## Start with Coherence Shield
compose-shield:
	docker compose --profile shield up -d

## Start everything
compose-all:
	docker compose --profile client --profile qkd --profile shield --profile hardened up -d

## Tear down
compose-down:
	docker compose --profile client --profile qkd --profile shield --profile hardened down -v

## Show image size
size:
	docker images $(IMAGE) --format "{{.Repository}}:{{.Tag}}\t{{.Size}}"

## Clean up
clean: stop
	docker rmi $(IMAGE):$(TAG) $(IMAGE):hardened $(IMAGE):custom 2>/dev/null || true