Back to projects

SecurityShipped2025

Quantum Safe Password Manager

A password generator and manager built on the Kyber algorithm, designed to survive quantum attacks.

Post-quantum
Encryption
Kyber
Key exchange
Docker
Deployment

Timeline

Sep 2025 to Dec 2025

Role

Security engineering

Team

2 students

Status

Shipped

Stack

PythonCRYSTALS-KyberDockerCryptography

Source

Section 01

Overview

Most password managers rely on cryptography that a sufficiently powerful quantum computer could break. This project builds credential handling on the Kyber algorithm, a post-quantum key encapsulation mechanism, so stored secrets stay safe even against that future.

FIG. 01 · Vault interface and generator
Screenshot coming soon

Section 02

Threat Model

The design assumes an adversary who can record encrypted vaults today and decrypt them years later with quantum hardware, the harvest-now, decrypt-later attack. Defending against that means post-quantum primitives at the key-exchange layer, not just longer passwords.

  • Harvest-now, decrypt-later resistance
  • Kyber-based key encapsulation for vault secrets
  • No plaintext secrets ever touch disk

Section 03

Architecture

Encryption workflows and key management are automated in Python, wrapping Kyber key encapsulation around vault operations. The whole application is containerised with Docker, making deployment portable and keeping the crypto environment pinned and reproducible.

FIG. 02 · Key encapsulation flow
Screenshot coming soon

Section 04

Results

The result is a working, portable, quantum-resistant credential manager, and a deep dive into what it takes to design cryptographically robust systems: understanding the primitives, not just importing them.