Quantum Resistant Cryptographic Solutions

Company profile

Quantum Resistant Cryptographic Solutions company profile

Quantum Resistant Cryptographic Solutions Corporation (QRCS) is a Canadian cryptographic software firm specializing in high-assurance, post-quantum secure communications. Founded and built by cryptographer John G. Underhill, QRCS has developed one of the most technically advanced and complete cryptographic toolkits available today. The company has written over 150,000 lines of MISRA-compliant ANSI C code, with no external dependencies, and engineered an interoperable family of quantum-resistant protocols optimized for fintech, military-grade security, and next-generation encrypted infrastructure. QRCS’s suite includes an end-to-end cryptographic library (QSC) and six protocols built entirely from original code and protected by pending U.S. patents. The software stack is self-contained, lightweight, efficient, and hardened to post-quantum standards using cryptographic primitives like Kyber, McEliece, Dilithium, and SPHINCS+. Every component is designed for maximum compatibility, forward secrecy, and resilience against both classical and quantum-era threats. The company is actively seeking acquisition via asset sale. This includes all source code, documentation, and patent rights—providing an immediate, turnkey upgrade path to quantum-safe cryptography for any cybersecurity vendor, fintech firm, or sovereign-grade technology provider. Products QSC (Quantum Safe Cryptographic library) is a mature and well-featured C library I have developed over the past seven years. It includes a dual IP stack, client/server templates, asynchronous threading functions, and a wide range of cryptographic tools. It integrates modern PQC algorithms such as Dilithium, Kyber, and SPHINCS+, classical ciphers and protocols like elliptic curve and AES, and proprietary post-quantum primitives I have designed; RCS, CSX, QMAC, and SCB. Everything has been written for clarity and readability, easy to audit, meticulously documented and easy to use, and MISRA-compliant throughout, making it ideal for high-security industries such as automotive, DoD, and critical infrastructure. You can continue to develop this library, certify it, control the development, without having to rely on third party licenses, bloated code bases, coding standards violations, or insecurities creeping into your distributions. You could own it and can make it a powerful tool-base in your software stable. HKDS – Hierarchical Key Distribution System: A scalable key distribution protocol that delivers quantum-secure encryption keys from a trusted root to clients and agents through multi-tiered, authenticated channels. Optimized for secure broadcasting, certificate issuance, and remote key control in post-quantum networks. A turn-key replacement for DUKPT, used in nearly every point-of-sale device in the world. HKDS is vectorized and parallelizable and uses the SHA3 SHAKE XOF as the permutation function. Our benchmarks show it being 8x faster than DUKPT server-side. What this translates to, is billions of dollars in infrastructure cost savings for the big payment processing companies. They will soon be facing regulatory mandates to update those systems to 256-bit security, and DUKPT-AES-256 is 2x as computationally expensive as the 128-bit secure version they are using, meaning they will have to near double their infrastructure to meet compliance. HKDS is a powerful new fintech protocol, one that brings payment processing into the post-quantum era. SKDP (Symmetric Key Distribution Protocol) is a pre-keyed symmetric tunneling protocol with a hierarchical (Merkle tree-like) structure. It is optimized for IoT devices that don’t have the resources for computationally expensive asymmetric cryptography. Session keys are unique and derived with minimal overhead, just a few SHA3 operations, so it scales well in large or diverse environments. This can be used in future payment systems, IoT devices, and in conjunction with asymmetric key exchanges in more sophisticated two-key encryption systems. QSMP (Quantum Secure Messaging Protocol) is a high-performance, peer-to-peer, post-quantum authenticated key exchange. It can use different post-quantum signature/cipher combinations (Kyber-Dilithium, McEliece-Dilithium, or McEliece-SPHINCS+). There are two modes to QSMP; Simplex which is a one-way trust in which the client trusts the server, completes a signed and authenticated key exchange in only two round trips. Duplex mode requires that both clients possess each other's public certificate, each signing an asymmetric cipher key exchange, which creates a 512-bit secure encrypted tunnel. Suitable for military grade communications between endpoints, or 'forever security' where no chance of communications compromise is tolerable. QSTP (Quantum Secure Tunneling Protocol) is a fast and efficient client-server encrypted tunneling protocol with an added root trust anchor. A root public certificate is distributed to clients that is used to authenticate certificates created by servers. The root/server certificate structure is compatible with the X.509 protocol and can be extended to create a chain of trust using the PKI. Ideal in many different scenarios where a server creates an encrypted tunnel with a client, but without the unnecessary overhead of a TLS based system. Some applications would include client access to domain server systems, automotive and industrial control systems, software installation and maintenance, cryptocurrency communications channels, and financial asset management. MPDC (Multi Party Domain Cryptosystem) is a forward-looking domain-based security system, that uses autonomous 'agents' to provide seed material for a client/server key exchange. Unlike other multi-party cryptosystems that have been developed using a Diffie Hellman like protocol combining multiple asymmetric keys to create a session key, this is an asymmetric/symmetric hybrid, using a control infrastructure that manages and authenticates different components in a security hierarchy. This is a complete domain security ecosystem, with a root security server, domain controller, agents, server and clients. It is immune to replay, spoofing, and man-in-the-middle attacks, uses sophisticated compound authentication controls, and is all done with post-quantum primitives. MPDC would be suitable in a high-security network; military, state, or wherever very strong cryptographic authentication and encryption mechanisms are required to safeguard access to critical systems and data. PQS (Post Quantum Shell) is a post-quantum SSH protocol, using the NIST standardized asymmetric cipher Kyber and Dilithium signature scheme as the core cryptographic protocols. A certificate is distributed to clients, along with a login prompt are used to create a connection to a remote server and launch a command shell. The example launches a Windows or Linux command shell, but it can be modified to create access to any shell or console-based application on the server. It creates an encrypted tunnel using an ephemeral and signed asymmetric key exchange, which keys symmetric cipher instances in a bi-directional encrypted communications stream. The server launches a password challenge, validating the user, and controlling access to the server's shell. There are many applications for this protocol, SSH is the primary tunneling protocol in fintech protocols like SWIFT, it is used for remote access to infrastructure, command and control systems, and remote update capabilities. SSH is used in many different venues and applications, and PQS, is a post-quantum secure alternative to the soon to be insecure SSH protocol.