Expand description
§PQCPrivacy
A Rust library bundling post-quantum cryptography, applied differential privacy, and a
broad set of exploratory privacy-research primitives. Read the crate README’s “What runs
today vs. what is designed” section before relying on any module — it documents, per
module, which of these are real standards-based cryptography, which are real computations
wearing physics/crypto vocabulary they don’t literally satisfy (e.g. chaos’s deterministic
“entropy,” hypergraph’s simulated “CHSH” score), and which are toy/placeholder logic with
the shape but not the guarantees of the real thing (zk::snark/zk::stark, genomic).
| Module | Description | Status |
|---|---|---|
hypergraph | Local graph with a simulated Bell-inequality (“CHSH”) score | simulated |
zk | Hash-based commit/challenge/response proofs; not soundness-checked SNARK/STARK | toy |
chaos | Real Chua/Rössler ODE integration; deterministic output, not entropy | simulated |
enclave | Local page access-control table; AES-GCM-encrypted at rest | simulated, non-default (enclave feature) |
ledger | Local map with SHA-256 tuple IDs; no real chain | simulated |
keyhop | ML-KEM-768 (FIPS 203) + HKDF-SHA256 + AES-GCM-256 key ratchet | real |
genomic | ASCII-character hashing and string-diff login; no real genomic/biometric processing | toy, non-default (genomic feature) |
interfaces | Capability structs, ML-DSA-65-signed attestation | real (signing) |
vault | AES-GCM-256 + Reed-Solomon k-of-n erasure sharding | real |
messenger | AES-GCM-256 message encryption; no P2P transport | real (crypto) |
viewer | AES-GCM-256 document encryption | real |
dp | Laplace/Gaussian noise, Rényi bound; simple budget composition | real |
compression | Real IFS affine math (5D points); lossless DEFLATE for bytes | real |
mesh | In-process node/routing simulation; Sphinx onion layer crypto is real, no networking | simulated |
sync | Local topological sort over a poset | simulated |
serial | ML-DSA-65-signed frame format; DEFLATE compression (format v1) | real |
fhe | Real LWE-based additive HE; encrypt→decrypt has a known bug | real, buggy |
§Quick Start
use privacy::chaos::ChaosOracle;
use privacy::hypergraph::PrivacyHypergraph;
use privacy::zk::HybridZkLayer;
// Initialize chaos oracle
let mut oracle = ChaosOracle::new();
let seed = oracle.fiat_shamir_seed().unwrap();
// Build 5D-EZPH hypergraph
let mut graph = PrivacyHypergraph::new(oracle.perturbation());
graph.encode_vertex("v1", 0.5, 1000.0, 1e-6, 1.2, 0.8, 0).unwrap();
// Generate hybrid ZK proof
let mut zk = HybridZkLayer::new();§The 0x307 crate family
pqc-privacy is one of six open-source crates from 0x307, held to one
audit and stability standard.
| Crate | Tier | What it does |
|---|---|---|
| pqc-sig | Production | ML-DSA, SLH-DSA and FN-DSA signatures (FIPS 204/205/206) |
| pqc-kem | Production | ML-KEM (FIPS 203), the X25519 + ML-KEM-768 hybrid, X-Wing, and sealed boxes |
| aethel-core | Production | Post-quantum anonymous identity: a separate identifier per context, context-bound ML-DSA signing |
| aethel-sdk | Preview | The SDK over aethel-core, and the place to start |
| aethel-vault | Preview | Agent-held wallet: policy-gated x402 / EIP-3009 signing with ML-DSA-65 spend records |
| pqc-privacy (this crate) | Lab | Research bundle, kept off every identity and payment path |
Production crates are thin, standards-bound libraries meant to be depended on today. Preview crates work and are published, with APIs still settling. Lab crates are research, never on an identity or payment path.
Runnable examples: 0x307/examples, one program per crate, pinned to the published versions.
Audit status: None of these crates has been independently audited, and none holds a CMVP / FIPS 140-3 validation. “FIPS 203/204/205/206” means the algorithms follow those standards, not that the code is certified. Known issues for this crate are in SECURITY.md. Versioning and support windows: STABILITY.md.
Re-exports§
pub use error::PrivacyError;pub use types::FiveDimCoord;pub use types::PrivacyProof;pub use types::PrivacyTuple;pub use types::ProofScheme;pub use types::EphemeralKey;pub use types::GenomicToken;pub use types::MeshNode;pub use types::NodeKind;pub use types::PrivacyIcosuple;pub use types::PosetEvent;pub use types::EntropyFrame;pub use chaos::ChaosOracle;pub use hypergraph::PrivacyHypergraph;pub use zk::EntanglementEngine;pub use zk::HybridZkLayer;pub use zk::ProofContext;pub use ledger::TupleChain;pub use dp::DpEngine;pub use vault::SanctuaryVault;pub use mesh::DW3BMesh;pub use keyhop::QfkhRatchet;pub use interfaces::UniNode;pub use interfaces::UviInterface;pub use compression::FractalCompressor;pub use sync::ChronosyncEngine;pub use messenger::SovereignMessenger;pub use viewer::QscifViewer;pub use chaos::chaos_entropy_bytes;pub use chaos::chaos_seed_u64;pub use hypergraph::hypergraph_chsh_value;pub use zk::zk_prove_manifold_path;pub use mesh::mixnet::sphinx_route_obfuscated;pub use serial::serial_build_obfuscation_frame;
Modules§
- chaos
- Chaos randomness oracle, Chua attractor, Rössler backup. Chaos module
- compression
- Real IFS affine math for 5D points, and lossless DEFLATE compression for byte data — two separate paths, see the module doc comment. Two separate things, both real, deliberately not conflated.
- dp
- Differential Privacy Engine with Rényi bounds. Differential Privacy Engine with Rényi Bounds (DPE-RB)
- error
- Shared error types for all modules. Unified error types for the PQCPrivacy crate.
- fhe
- CKKS-style FHE engine — polynomial ring arithmetic, keygen, encrypt, decrypt, homomorphic add/mult/negate/bootstrap. Shared across all Wyqcc products. FHE Engine — real LWE-based additive homomorphic encryption, not actually CKKS
- hypergraph
- Five-Dimensional Entangled Zero-Knowledge Privacy Hypergraph. Five-Dimensional Privacy Hypergraph — a local graph simulation
- interfaces
- UNI Universal Node Interface + UVI Universal VM Interface. UNI/UVI — capability registration with real ML-DSA-65 attestation
- keyhop
- Quantum Fast Key Hopping protocol. Quantum Fast Key Hopping (QFKH) Protocol
- ledger
- TupleChain semantic ledger with expiry-bound tuples. TupleChain — a local map, not a ledger or a chain
- mesh
- DW3B mesh anonymity abstraction layer with all node types. Mesh module — a local model of a mesh network, not a working one
- messenger
- Sovereign Messenger with P2P direct mode. Messenger — real AES-GCM-256 message encryption, no P2P transport
- serial
- Privacy icosuple serialization format (8192-byte fixed). Icosuple Serialization Format (PI-SF) — real ML-DSA-65 signing, DEFLATE compression
- sync
- Hypergraph Chronosync for poset resolution. Chronosync — a local topological sort over a poset
- types
- Shared types: PrivacyProof, Icosuple, FiveDimCoord, etc. Shared types across the PQCPrivacy crate.
- vault
- Sanctuary Vault ransomware-proof storage system. Sanctuary Vault — real AES-GCM-256 + real Reed-Solomon erasure sharding
- viewer
- Quantum SCIF Viewer for classified documents. Clearance-gated document viewer — real AES-GCM-256, no classified-handling claim
- zk
- Zero-knowledge proof primitives: SNARK, STARK, Hybrid, Entanglement Engine. ZK module — hash-based proof constructions, not soundness-checked SNARK/STARK