Quipu brings post-quantum encryption to Rust and Python in one auditable library

·1 views

Quipu is a free, open-source hybrid post-quantum encryption library built in pure Rust, designed to protect data against future quantum computing threats using a 'harvest now, decrypt later' threat model. It combines classical and post-quantum cryptographic primitives — including XChaCha20-Poly1305, ML-KEM-1024, and ML-DSA-87 — all at NIST Category 5 security level. The project was simplified from a multi-language design with a C ABI to a single Rust codebase, with Python support added via a native PyO3 wheel available on PyPI. Quipu is available on crates.io and GitHub under the AGPL-3.0 license, and its cryptographic primitives are validated against NIST's official ACVP test vectors. However, the developers caution that the library has not yet undergone an independent cryptographic audit and should currently be used only for review and experimentation rather than securing high-value data.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer shares hybrid Laravel-Python architecture for production-ready AI agents

A developer at SOFTDEFT has detailed a hybrid architecture for building enterprise-grade autonomous AI agents, combining Laravel and Python instead of relying on a single Python stack. In this setup, Laravel manages state, authentication, job queues, rate-limiting, and client-facing APIs, while a Python FastAPI microservice handles LLM orchestration, tool execution, and vector operations. Agent tasks are tracked in a Laravel database and dispatched asynchronously via Redis queues, with the Python engine receiving payloads and returning results through a webhook callback. The approach aims to avoid reinventing enterprise infrastructure in Python, leveraging Laravel's mature ecosystem for backend concerns. The author draws on experience building ERPs and automation tools to present this as a scalable, production-tested pattern.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Git Workflow Explained: From Working Directory to Remote Push

Git is a version control system that tracks file changes through a four-stage workflow: working directory, staging area, commit, and remote repository. The working directory holds local project files, while the staging area lets developers selectively choose which changes to include in the next commit. A commit saves a snapshot of staged changes with a descriptive message, and 'git push' then uploads those commits to a remote platform like GitHub. Connecting a local project to GitHub requires setting a remote address, with only the public SSH key shared externally. Following this structured sequence helps developers maintain a clear and organized record of project changes over time.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Warp Uses Claude AI to Power Self-Improving Developer Agents

Warp, a modern terminal application, has built self-improving AI agents using Anthropic's Claude as the underlying model. The integration allows Warp's agents to iteratively enhance their own performance over time. Anthropic shared details of this collaboration on the Claude blog, highlighting it as a notable use case for their AI system. The approach reflects a growing trend of developer tools embedding advanced AI agents to automate and optimize workflows.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Seven Core Principles That Help Distributed Systems Stay Reliable at Scale

Software engineer Maneshwar, creator of AI code review tool LiveReview, has outlined seven foundational ideas that underpin reliability in large distributed systems. The piece centers on the CAP theorem, which states that a distributed system can guarantee at most two of three properties: consistency, availability, and partition tolerance. Since network partitions are inevitable in real-world infrastructure, the practical choice narrows to prioritizing either consistency or availability during an outage. Google Spanner exemplifies the consistency-first approach, using atomic clocks to keep transactions synchronized globally, while Amazon DynamoDB favors availability by accepting writes during partitions and reconciling conflicts afterward. The article argues that neither approach is universally superior, as the right trade-off depends on the specific reliability requirements of the application.

0 comments Read more at DEV Community