Back to browse
GitHub Repository

Lightweight hybrid post-quantum proxy tunneling legacy traffic using X25519 and ML-KEM-768 (FIPS 203).

1 starsGo

Latch – Lightweight hybrid post-quantum proxy (X25519M-KEM-768)

by ventie·Jul 16, 2026·1 point·0 comments

AI Analysis

●●●BangerWizardryBig Brain

Zero-allocation data path and session resumption make post-quantum crypto actually usable.

Strengths
  • Achieves 0 B/op and 0 allocs/op in the core routing layer via sync.Pool recycling.
  • Implements NIST FIPS 203 ML-KEM-768 alongside X25519 for hybrid forward secrecy.
  • Uses mTLS for node authentication before expensive post-quantum handshake math occurs.
Weaknesses
  • Requires managing a separate PKI and certificate infrastructure for mTLS node verification.
  • Niche utility for most devs unless you specifically need to future-proof legacy TCP streams today.
Category
Target Audience

Infrastructure engineers and security architects

Similar To

WireGuard · Tailscale · Stunnel

Similar Projects