The Cryptographic Supply Chain for the Post-Quantum Era
Quantum Secure Gateway turns entropy from an invisible, silent liability into a governed, audited, vendor-neutral resource. Every draw carries evidence-backed provenance. Your regulator can replay the trail.
Live on api.quantumsecuregateway.com — not a waitlist, not a demo environment.
PROVENANCE
Hardware origins documented per draw
EVIDENCE
6-Layer Quantum Assurance Pyramid
AUDIT
Dual-layer (KV + R2 JSONL), permanent retention
TRANSPARENCY
Explicit fallback signaling, never silent
Built for three distinct buyers
QSG is not just an endpoint. It is a cryptographic supply chain that solves different problems for security, infrastructure, and quantum teams — from the same API.
Security Teams
Audit compliance & provenance verification
Zero-trust cryptographic sourcing with permanent compliance logs. Hardware origin explicitly documented per draw. No more "trust us, it's random."
Infrastructure Teams
API integration & fallback handling
Seamless REST deployment via api.quantumsecuregateway.com. Graceful, monitorable fallback when the reservoir depletes — never silent, always disclosed in the response.
Quantum Teams
Entropy quality & per-draw metrics
Per-draw entropy score (≥ 0.99 admission threshold), NIST SP 800-90B RCT/APT health-check results, hardware-origin source ID, and signed provenance per response.
The 6-Layer Quantum Assurance Pyramid
Entropy quality is the visible top of an evidence stack. Six layers — each producing its own validation artifact — back every draw. This is the trust engine.
Post-Quantum Crypto
Hybrid X25519 + ML-KEM-1024 key establishment (FIPS 203 Category 5, 256-bit quantum security) with AES-256-GCM data encryption. Shipped today.
NIST Health Gating
SP 800-90B Repetition Count Test (RCT) and Adaptive Proportion Test (APT) on every draw. Failed tests force fallback. rct_passed / apt_passed in response.
Diagnostic Tomography
Diagnostic tomography snapshots on the calibration loop. Currently archived internally; planned for API exposure.
Quantum Channel
Teleportation & amplitude-transport fidelity tracking per channel. Currently internal to the calibration loop.
Entropy Source
Hardware-derived entropy with per-batch entropy_score ≥ 0.99 admission threshold. source_class enum in every response.
Geometry & Topology
Engineered gate connectivity & Near-Bell correlation tracking. Roadmap item — informs the hardware procurement & validation cycle, not yet exposed in the API.
Explicit fallback mechanics
Legacy CSPRNGs fail in silence. QSG never does. Every response carries its operational state — clients always know whether they got hardware-derived entropy or the documented fallback.
- 1
source_class— admission threshold isentropy_score≥ 0.99 - 2 SP 800-90B RCT and APT must pass on the sample window
- 3 Pool must have enough bytes remaining for the health-check sample size (1024 B)
If any check fails, the response includes a nested fallback object (is_fallback: true, reason: "...") with the actual reason code (e.g. pool_unavailable, health_tests_failed:RCT,APT). No silent degradation.
Operational speed meets persistent compliance
Operational Layer
KV Store · 90-day rollingHigh-speed operational monitoring, rate-limiting, metering hooks, and immediate API gateway telemetry. Designed for the operational dashboard.
Persistent Layer
R2 JSONL · PermanentCryptographic compliance, regulatory handoffs, full-batch provenance, and deep historical forensics. Region-pinned, 7-year retention. Replay-ready for auditors.
Ready to wire QSG into your stack?
Sandbox keys provisioned in 24-48 hours. Builder through Enterprise — six tiers, each backed by the same 6-layer evidence chain.