Encrypt for the quantum era — in your browser.
A live, step-by-step proof of hybrid X25519 + ML-KEM-768 encryption. Two shared secrets — one classical, one post-quantum — are combined via HKDF to key AES-256-GCM. An attacker has to break both. It all runs on your device; nothing is sent anywhere.
Hybrid X25519 + ML-KEM-768 — the same defense-in-depth scheme now in TLS 1.3 (Chrome, Cloudflare). An attacker must break BOTH classical and post-quantum crypto. Runs 100% in your browser; the secret key never leaves this tab.
Why hybrid, and what you gain
- Harvest-now-decrypt-later is real. Data you encrypt today can be stored and cracked once quantum computers mature. ML-KEM-768 (NIST FIPS 203) closes that door now.
- Defense in depth. The classical X25519 leg means even a flaw in the newer post-quantum scheme can't expose you — and vice-versa. This exact hybrid ships in TLS 1.3 (Chrome, Cloudflare, AWS).
- Client-side only. The secret key is generated and used in your tab. A server compromise never sees plaintext.
- No home-grown crypto. Built on the audited
@noblelibraries — we don't roll our own primitives.