Restricted — architecture and results only. No control laws, protocol internals, key handling, or repositories.
Record 03
VAJRA
A point-to-point post-quantum secure link between a controller and a node, frozen at v1.0 in Rust.
- Status
- v1.0 (frozen)
- Year
- 2026
- KEM
- ML-KEM-768 + X25519
- Signatures
- ML-DSA-65
- AEAD
- ChaCha20-Poly1305
Briefing
- Problem
- A controller-to-node link whose key exchange stays secure against a future quantum adversary.
- What exists today
- A Rust implementation frozen at v1.0, and a Python reference.
- Key result
- 16 Rust tests pass at v1.0; the Python reference passes 53 of 53.
Objective
A controller-to-node link whose key exchange is designed to stay secure against a future quantum adversary, by combining a post-quantum and a classical key exchange.
Architecture
Schematic
-
Key exchange
- Hybrid KEM: ML-KEM-768 + X25519
-
Authentication
- ML-DSA-65 signatures
-
Transport
- ChaCha20-Poly1305 over UDP
One controller, one node, one link: point-to-point. There is no multi-hop routing.
Constraints
The parameter sets are NIST Category 3, not CNSA 2.0. Peer identities are pinned in configuration; there is no certificate authority or revocation.
Hardware and firmware
The frozen core is written in Rust, with a Python reference implementation. The handshake and record layer are also modelled in ProVerif; those models are not yet machine-checked. This project is restricted: this page covers architecture and results only.
Measurements
Test suites at v1.0.
- 16 Rust tests pass. Test suite
- 53/53 Python reference tests pass. Test suite
Status
v1.0 (frozen)
Sealed
Not published here: protocol internals, key handling, and the repository.
The record covers architecture and results only. There is no public repository.
End of record R-03
Questions about this record? hello@vedantsomani.tech or open a channel.