Module pqc 

zernel pqc — Post-Quantum Cryptography tools

Provides quantum-resistant cryptographic operations for ML assets:

• Key generation (ML-KEM + ML-DSA compatible keypairs)
• Model/checkpoint signing and verification
• Model/data encryption with PQC key exchange
• Secure boot chain verification

Uses SHA-256 + AES-256-GCM as the symmetric core, with PQC key encapsulation and signatures wrapping the symmetric keys.

Modules

hex 🔒

Simple hex encoding (avoids adding hex crate dependency).

Structs

PqcKeypair 🔒

PQC keypair stored on disk.

PqcSignature 🔒

Signature metadata stored alongside signed files.

Enums

PqcCommands

Constants

KEY_DIR 🔒

ZERNEL_PQC_VERSION 🔒

Functions

collect_files 🔒

generate_key_material 🔒

Generate a cryptographically secure random key.

hash_path 🔒

Hash a file or directory (SHA-256).

key_path 🔒

load_key 🔒

pqc_dir 🔒

run

sign_hash 🔒

Sign a hash with the secret key (HMAC-SHA256).

verify_signature 🔒

Verify a signature.