pqc-messaging-plugin

[](https://opensource.org/licenses/MIT)

> Research and Prototyping Only. This plugin uses post-quantum-mcp which depends on liboqs, explicitly not recommended for production use or protecting sensitive data.

A Claude Code plugin that gives AI agents quantum-resistant encrypted messaging capabilities. Agents can generate cryptographic identities, exchange keys, and send/receive authenticated encrypted messages — all using post-quantum algorithms that resist both classical and quantum attacks.

• Identity management — generate hybrid X25519 + ML-KEM-768 encryption keys and ML-DSA-65 signing keys, stored as opaque handles (secret keys never enter the conversation)
• Key exchange — import/export identity cards, manage a contact directory, verify fingerprints
• Encrypted messaging — seal messages with hybrid PQC encryption, sign with ML-DSA-65, deliver as self-contained envelopes
• Sender verification — verify who sent a message before decrypting it (signature checked first, decryption second)
• Forensic inspection — examine envelope metadata (sender, sizes, fingerprints) without any secret keys

Fixed suite: mlkem768-x25519-sha3-256

| Component | Algorithm | Standard | Purpose | |-----------|-----------|----------|---------| | Key encapsulation | X25519 + ML-KEM-768 | RFC 7748 + FIPS 203 | Hybrid quantum-resistant confidentiality | | KEM combiner | SHA3-256 | LAMPS draft | Combines classical + PQ shared secrets | | Encryption | AES-256-GCM | NIST | Authenticated encryption with AAD | | Sender signature | ML-DSA-65 | FIPS 204 | Quantum-resistant authentication | | Fingerprints | SHA3-256 | NIST | Public key identity |

git clone