The Crypto Service Ecosystem — 18 Workspace Packages & Enterprise Modules

Implements FIPS 203/204/205 algorithms (via @noble/post-quantum; not a validated cryptographic module): ML-KEM key encapsulation, ML-DSA and SLH-DSA signatures, and X25519/P-256/X448 + ML-KEM hybrid KEMs and RFC 9180 HPKE, alongside classical algorithms from @noble/* and OpenPGP.js.

Self-hostable Fastify REST microservice exposing crypto-lib operations over HTTP, with OpenAPI documentation, multi-cloud KMS endpoints, OPAQUE authentication, rate limiting and OpenTelemetry instrumentation.

Interactive command-line tool for OpenPGP, modern and post-quantum key generation, HPKE encryption, KMS operations, signing, hashing, password hashing (Argon2id) and CBOM generation.

Zero-dependency, fetch-based TypeScript client with typed bindings for all crypto-server REST API endpoints including KMS, HPKE, OPAQUE, and algorithm negotiation.

Unified KMS interface with native production providers for AWS KMS, Google Cloud KMS (REST v1), HashiCorp Vault Transit, Azure Key Vault, and Local KMS with zero external SDK dependencies.

Web Crypto API adapter for edge runtimes (Cloudflare Workers, Vercel Edge, Deno, Bun, browsers), with runtime detection and text/base64 fallbacks.

Postman collections and environments for the crypto-server REST API, plus shared TypeScript types and schemas.

Express and Fastify middleware for request payload decryption, response encryption, HMAC signature verification and HS256 JWT verification.

Transparent field-level encryption for Prisma ORM (XChaCha20-Poly1305, with optional HMAC for searchable fields).

Custom TypeORM column decorators (@EncryptedColumn()) and transformers for transparent entity-level envelope encryption.

WebAssembly acceleration module routing heavy cryptographic and post-quantum operations (ML-KEM, ML-DSA, BLAKE3, ChaCha20) through native WASM with transparent pure-JS fallback.

CycloneDX 1.6 and SPDX 3.0 Cryptographic Bill of Materials generator that scans source code for algorithm usage and cryptographic inventory.

Model Context Protocol server exposing crypto-lib operations and key management tools to AI assistants.

Language Server Protocol implementation that flags weak or quantum-vulnerable algorithm names (MD5, SHA-1, DES, short RSA keys) with pattern rules.

React hooks (useEncrypt, useHash, useKeypair, useSignature) and a provider for client-side cryptography.

Vue 3 composables (useEncrypt, useHash, useKeypair, useSignature) and a plugin for client-side cryptography.

Synthetic test keys, fixtures, mocks and helpers for testing code that uses crypto-lib.

Micro-benchmark harness comparing classical and post-quantum operation latency and throughput across symmetric, asymmetric, and streaming ciphers.