Skip to main content

Drop-in quantum-safe upgrade for Python cryptography - zero code changes required

Project description

quantumvault-cryptography

A Product of AllSecureX
Enterprise-Grade Post-Quantum Cryptography

License PyPI version


Drop-in quantum-safe upgrade for Python applications - zero code changes required.

This package transparently upgrades your Python application's cryptographic operations to quantum-safe alternatives. Simply install and configure at application startup - all existing crypto code continues to work while being protected against quantum computer attacks.

Features

  • Zero Code Changes: Works with existing cryptography library usage
  • Automatic Upgrades: RSA/ECDSA operations upgraded to ML-KEM/ML-DSA hybrids
  • Multiple Modes: Monitor, hybrid, or pure post-quantum
  • Analytics: Track all crypto operations via QuantumVault dashboard
  • Gradual Rollout: Start in monitor mode, then progressively upgrade
  • Fallback Safety: Automatic fallback to classical crypto on errors

Installation

pip install quantumvault-cryptography

Quick Start

Add this at the very top of your application entry point:

import os
import quantumvault_cryptography

# Must be called BEFORE importing cryptography
quantumvault_cryptography.install(
    api_key=os.environ['QUANTUMVAULT_API_KEY'],
    mode='hybrid'  # Start with 'monitor' to observe without changes
)

# Now all your existing code is quantum-safe!
from cryptography.hazmat.primitives.asymmetric import rsa

# This RSA key is automatically upgraded to RSA + ML-KEM-768 hybrid
private_key = rsa.generate_private_key(
    public_exponent=65537,
    key_size=2048
)

Configuration

import quantumvault_cryptography

quantumvault_cryptography.install(
    # Required: Your QuantumVault API key
    api_key='qvp_...',

    # Optional: Plugin ID for analytics (get from QuantumVault dashboard)
    plugin_id='plugin_abc123',

    # Optional: API endpoint (defaults to production)
    endpoint='https://api.quantumvault.io',

    # Mode: 'monitor' | 'hybrid' | 'pq_only' | 'intercept'
    # - monitor: Log only, no changes (safe to start with)
    # - hybrid: Use classical + quantum-safe combined (recommended)
    # - pq_only: Pure post-quantum (future-proof)
    # - intercept: Upgrade classical to PQ transparently
    mode='hybrid',

    # Fallback to classical crypto on errors
    fallback_on_error=True,

    # API timeout in milliseconds
    timeout_ms=5000,

    # Enable debug logging
    log_operations=True,
)

Algorithm Mappings

Classical Algorithm Quantum-Safe Upgrade Hybrid Option
RSA-2048 ML-KEM-768 RSA-2048 + ML-KEM-768
RSA-3072 ML-KEM-1024 RSA-3072 + ML-KEM-1024
RSA-4096 ML-KEM-1024 RSA-4096 + ML-KEM-1024
ECDSA-P256 ML-DSA-44 ECDSA-P256 + ML-DSA-44
ECDSA-P384 ML-DSA-65 ECDSA-P384 + ML-DSA-65
ECDH-P256 ML-KEM-768 ECDH-P256 + ML-KEM-768
Ed25519 ML-DSA-44 Ed25519 + ML-DSA-44
X25519 ML-KEM-768 X25519 + ML-KEM-768

API Reference

install(**config)

Install the QuantumVault crypto shim. Must be called before any cryptography imports.

uninstall()

Remove the shim and restore original functions.

is_active()

Returns True if the shim is currently installed.

status()

Get current shim status and statistics:

import quantumvault_cryptography

print(quantumvault_cryptography.status())
# {
#   'installed': True,
#   'mode': 'hybrid',
#   'stats': {
#     'total_operations': 150,
#     'upgraded_operations': 142,
#     'classical_operations': 8,
#     'failed_operations': 0,
#     'by_algorithm': {'rsa': {'upgraded': 100, 'classical': 0}, ...}
#   }
# }

get_mappings()

Get all algorithm mappings.

Migration Guide

Step 1: Monitor Mode (Week 1)

Start with monitor mode to understand your crypto usage:

quantumvault_cryptography.install(
    api_key=os.environ['QUANTUMVAULT_API_KEY'],
    mode='monitor',
    log_operations=True
)

Step 2: Review Analytics

Check your QuantumVault dashboard to see:

  • Which algorithms are being used
  • Operation frequency and latency
  • Potential compatibility issues

Step 3: Enable Hybrid Mode (Week 2+)

Once confident, switch to hybrid mode:

quantumvault_cryptography.install(
    api_key=os.environ['QUANTUMVAULT_API_KEY'],
    mode='hybrid'
)

Step 4: Pure Post-Quantum (Optional)

For maximum future-proofing:

quantumvault_cryptography.install(
    api_key=os.environ['QUANTUMVAULT_API_KEY'],
    mode='pq_only'
)

Supported Operations

Operation Supported Notes
rsa.generate_private_key() Yes Key generation upgraded
ec.generate_private_key() Yes Key generation upgraded
Ed25519PrivateKey.generate() Yes Key generation upgraded
private_key.sign() Coming soon Signature operations
public_key.verify() Coming soon Verification operations
AES operations N/A Already quantum-safe
SHA-256+ hashing N/A Already quantum-safe

Logging

Enable Python logging to see shim activity:

import logging

logging.basicConfig(level=logging.DEBUG)
logging.getLogger("quantumvault").setLevel(logging.DEBUG)

Requirements

  • Python 3.8+
  • cryptography >= 41.0.0
  • requests >= 2.28.0

License

MIT

Support

About AllSecureX

AllSecureX provides enterprise-grade post-quantum cryptography solutions. QuantumVault is our flagship product for NIST-standardized quantum-resistant algorithms (FIPS 203, 204, 205).

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

quantumvault_cryptography-1.0.3.tar.gz (12.3 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

quantumvault_cryptography-1.0.3-py3-none-any.whl (10.5 kB view details)

Uploaded Python 3

File details

Details for the file quantumvault_cryptography-1.0.3.tar.gz.

File metadata

File hashes

Hashes for quantumvault_cryptography-1.0.3.tar.gz
Algorithm Hash digest
SHA256 8db5c7b26da54bf9bd16be529bc6581dbe708c47781fbf409fae312382f5dc63
MD5 d1cc13bbf3462ad7e556db43d2757480
BLAKE2b-256 17f8104a61295537658ec796839fd5bbd162a4197fa4508323f38615ac50f132

See more details on using hashes here.

File details

Details for the file quantumvault_cryptography-1.0.3-py3-none-any.whl.

File metadata

File hashes

Hashes for quantumvault_cryptography-1.0.3-py3-none-any.whl
Algorithm Hash digest
SHA256 41532ff17fac5db904a43b71c1be2263f2f8894ac64b764b26570e9e5997b972
MD5 4dff5afe1897704b2e2703f9904c9d14
BLAKE2b-256 3e11a50bdcbcc14229cf354225bc6a68555d51c6c961dbdb93b335fedf7081c9

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page