Security Without
Compromise

🔮 Quantum Computing

Future quantum computers will break RSA and ECDSA. QWAMOS uses NIST-standardized post-quantum algorithms that remain secure even against quantum attacks.

📡 Network Surveillance

All network traffic is routed through Tor by default. DNS queries are encrypted and validated. No direct connections reveal your true IP address.

🦠 Malware & Exploits

Each app runs in a hardware-isolated VM. A compromised app cannot access other VMs, read your data, or persist after reboot.

👁️ Physical Access

Full disk encryption with panic wipe. 4× hardware relay kill switches (Network, Mic, Camera, Location) cut power at the relay — not software. Betavoltaic nuclear security rail (Betavolt BV100 / Ni-63) keeps the Tamper MCU powered independently of the main battery.

Digital Signatures

Security Level: 256-bit
Algorithm: Module-Lattice Digital Signature
Key Size: 4,627 bytes (public)
Signature Size: 4,595 bytes
NIST Status: Standardized (FIPS 204)

Protects against quantum computers using lattice-based cryptography. All system updates and app signatures use ML-DSA-87.

Key Encapsulation (Hybrid)

ML-KEM-1024  (FIPS 203, NIST Level 5)
  XOR BIKE     (Round 4 alternate)
  XOR HQC      (Round 4 alternate)
  XOR McEliece-8192 (code-based)
  XOR X25519   (classical guard)
Rule: No standalone ECC anywhere

Five-way hybrid KEM — requires simultaneous breaks of five independent hard problems. Used for all TLS connections and inter-VM communications.

Compact Lattice Signatures

Security Level: NIST Level 5
Algorithm: NTRU lattice (FFT-based)
Public Key: 1,793 bytes
Signature Size: ~1,280 bytes (avg)
Basis: NTRU / GPV framework

Smallest signature size at Level 5. Used for bandwidth-constrained communications and embedded security contexts.

Hash-Based Signatures

Security Level: NIST Level 5
Algorithm: Stateless hash-based
Public Key: 64 bytes
Signature Size: 49,856 bytes
Assumptions: SHA-2 collision resistance

Conservative choice with no algebraic structure assumptions. Used for long-lived keys and high-assurance contexts.

Stream Cipher

Key Size: 256 bits
Nonce Size: 96 bits
Performance: 3.5 GB/s (ARM64)
Authentication: Poly1305 MAC
Status: RFC 8439

High-performance authenticated encryption. Used for disk encryption and secure storage of user data.

Hash Function

Output Size: 256 bits (default)
Performance: 5.2 GB/s (ARM64)
Features: Parallelizable
Tree Mode: Yes
Status: Production Ready

Modern cryptographic hash function. Faster than SHA-256 with better security properties and parallelization.

Password KDF

Mode: Argon2id (hybrid)
Memory-hard: Yes
Side-channel resistant: Yes
RFC: 9106
Status: Winner, PHC 2015

Memory-hard password hashing and key derivation. Resistant to GPU/ASIC brute-force. Used for all user authentication and disk encryption keys.

Key Derivation

Function: HKDF with BLAKE2b PRF
Output: Variable length
Use: Session key derivation
Input: Hybrid KEM shared secret
Per-VM: Isolated key material

Derives per-session, per-VM key material from the hybrid KEM shared secret. Ensures forward secrecy across all encrypted channels.

Quantum TRNG

Source: Quantum vacuum fluctuations
Method: CV homodyne detection
Rate: 42.7 Gbit/s secure bits
CMRR: >73 dB
Compliance: NIST SP 800-90B
Chip size: 20×10mm (v1) / 10×5mm (v2)

Feeds /dev/hwrng directly. All QWAMOS VM domains receive real quantum entropy — not PRNG-seeded /dev/urandom.

CV-QKD Receiver

Protocol: Continuous Variable QKD
Key rate: 3.2 Mbit/s
Distance: 9.3 km demonstrated
Wavelength: 1550nm (telecom C-band)
ADC: 14-bit @ 1 GSa/s
Keys → Infineon HSM (PQC keystore)

Information-theoretically secure key exchange — no computational hardness assumptions. Session keys deposited directly into the Infineon SLB9672 HSM.

Sagnac Gyroscope

Principle: Sagnac interferometer
Formula: φ = 4πAΩ/λc
Output: GPIO → Tamper MCU (M0+)
Power: Nuclear rail (Betavolt BV100)
Action: Tamper alert even at zero battery
Integration: Dom0 security daemon

Detects rotation and physical movement at rest. Alerts the Tamper MCU (nuclear-powered, always-on) to suspicious handling — border crossing, cavity opening, mail interception.

Certification Path

NIST SP 800-90B  →  Health tests on-chip (FPGA)
       ↓
FIPS 140-3 Level 3  →  HSM integration (Infineon SLB9672)
       ↓
NSA CSfC APL  →  Commercial Solutions for Classified APL

R&D Partner: Battelle Memorial Institute
Fabrication: FLDW, Corning EAGLE XG — no cleanroom required
Capital cost: ~$610K–$1.21M vs $50M+ silicon photonic foundry