#tls #x25519 #ed25519 #kyber

securo

Cryptographic impl for hybrid classical-post-quantum authentication and secure communication

7 releases

Uses new Rust 2024

new 0.1.52 Mar 6, 2026
0.1.51 Mar 6, 2026
0.1.4 Jan 31, 2026
0.1.3 Nov 16, 2025

#1818 in Cryptography

MIT license

105KB
2K SLoC

Securo Logo

A hybrid post-quantum end-to-end encryption implementation using Securo:
HKDF-SHA256 hybrid key derivation from X25519 + Kyber-1024, SalsaBox (XSalsa20-Poly1305) bootstrap encryption, ChaCha20-Poly1305 session AEAD, Ed25519 signatures, Certificate (TLS 1.3) pinning (SPKI based), replay protection.

Server and Client included using Actix & Diesel Frameworks

Crates.io Documentation

Prelude

Read Securoserv and Securoclient for exact implementation of Securo.

Read this Example of Implementation for a short and easy way to implement Securo.

This crate provides the cryptographic impl for an authentication and communication system. It implements a hybrid classical-post-quantum key exchange protocol (X25519 + Kyber-1024) with HKDF-SHA256 key derivation, SalsaBox bootstrap channel encryption, ChaCha20-Poly1305 session encryption, and certificate pinning to establish secure, authenticated connections between client and server.

Crate Documentation


Security Architecture


Authentication Architecture


Build instructions for Server & Client

Dependencies

~24–40MB
~613K SLoC