The engineering around post-quantum cryptography is as important

NEXUS-Q is an open-source Rust security engine intended to help applications protect data, keys, and identities using standardized classical and post-quantum cryptography. It combines cryptographic primitives with practical systems for encrypting files and streams, managing key lifecycles, signing data, and handling vaults, policies, and audit logs. The project is organized into a core, command-line and server interfaces, optional security and PKI services, and bindings for languages including Go, Python, Java, Swift, and TypeScript. Its central premise is that adopting post-quantum algorithms requires more than implementing the algorithms: developers also need usable interfaces, operational controls, integration paths, and evidence about how the software behaves.

The README emphasizes those engineering and assurance boundaries rather than presenting the project as ready-made proof of security. RustCrypto is the default implementation path; the native ML-KEM and ML-DSA backend is experimental, opt-in, and not independently audited. The project reports CI, fuzzing, a documented threat model, and benchmark work, but explicitly makes no production-readiness claim, FIPS validation claim, or claim of a completed external audit. Its protections also depend on deployment conditions: stolen vault files remain vulnerable to weak passwords or exposed unlock secrets, and controls such as zeroization cannot defeat an attacker who controls the operating system or process. Package availability, platform support, release provenance, and hardware integrations vary, so users are expected to verify the specific component and release they intend to deploy.