SecurityShipped2025
Quantum Safe Password Manager
A password generator and manager built on the Kyber algorithm, designed to survive quantum attacks.
- Post-quantum
- Encryption
- Kyber
- Key exchange
- Docker
- Deployment
Timeline
Sep 2025 to Dec 2025
Role
Security engineering
Team
2 students
Status
Shipped
Stack
Source
Section 01
Overview
Most password managers rely on cryptography that a sufficiently powerful quantum computer could break. This project builds credential handling on the Kyber algorithm, a post-quantum key encapsulation mechanism, so stored secrets stay safe even against that future.
Section 02
Threat Model
The design assumes an adversary who can record encrypted vaults today and decrypt them years later with quantum hardware, the harvest-now, decrypt-later attack. Defending against that means post-quantum primitives at the key-exchange layer, not just longer passwords.
- Harvest-now, decrypt-later resistance
- Kyber-based key encapsulation for vault secrets
- No plaintext secrets ever touch disk
Section 03
Architecture
Encryption workflows and key management are automated in Python, wrapping Kyber key encapsulation around vault operations. The whole application is containerised with Docker, making deployment portable and keeping the crypto environment pinned and reproducible.
Section 04
Results
The result is a working, portable, quantum-resistant credential manager, and a deep dive into what it takes to design cryptographically robust systems: understanding the primitives, not just importing them.