Applied PQC GitHub Playground Blog @AppliedPQC

Applied Post-Quantum Cryptography

A book that builds post-quantum cryptography from the ground up — from lattices and Learning With Errors to complete, byte-exact implementations of all four NIST standards.

Read the book (PDF) Run the code

Everything in the project

The book, the runnable implementations, the standards and the research — filter by what you need.

  • The book

    The full arc, from finite fields and lattices through ML-KEM, ML-DSA, SLH-DSA and FN-DSA, to side channels and deployment.

    PDF259 pages

  • Runnable code

    All 106 code listings and the four reference implementations run in your browser, with nothing to install.

    Playground106 listings

  • awesome-pqc

    A curated, link-verified list of post-quantum resources for people who have to build and ship it — standards, test vectors, libraries, deployment.

    Listlink-verified

  • bitcoin-stark-verifier

    A STARK verifier in Bitcoin Script with no OP_CAT: Poseidon2 over KoalaBear, and WHIR on top of it. Every challenge is squeezed inside the script and every constraint derived from the transcript, so the verifier ends on its own identity rather than on a hint.

    Rustno soft fork

  • Disproving one step

    The verifier is three hundred blocks and is never run on chain. What is run is one chunk of it, bound by Winternitz signatures — 22 Poseidon2 rounds in a standard transaction, about two thousand chunks for the whole verifier.

    BitVM~2,000 chunks

  • WHIR on Bitcoin Script

    A formal account of the STIR and WHIR proximity tests, and a review of the verifier against them — the algorithm stated formally, the implementation reviewed against it, and completeness and soundness separated into what the protocol proves and what the script checks.

    PDF17 pages

  • ML-KEM

    21 of 21 algorithms. Key encapsulation at 512, 768 and 1024.

    FIPS 203

  • ML-DSA

    49 of 49 algorithms. Signatures at 44, 65 and 87.

    FIPS 204

  • SLH-DSA

    25 of 25 algorithms, all twelve approved parameter sets.

    FIPS 205

  • FN-DSA

    18 of 18 Falcon algorithms. Still in development at NIST, so validated against Falcon's own tests.

    FIPS 206

  • Post-quantum migration for Bitcoin layer 2s

    A Bitcoin layer 2 settles to a base layer it cannot change, borrows consensus from a third ecosystem, and runs a bridge whose trust root is cryptography of its own choosing. Where the post-quantum exposure actually sits, and who can fix each part.

    Blog2026-07-31

The implementations on GitHub → · 462 checks, 0 failures against ACVP · all posts →