Abstract: A method of cryptographic agility for post-quantum cryptography by swapping a ciphersuite is provided. The method can include performing, by a configuration agent or proxy, cryptography based on a current ciphersuite. The method can further include receiving, by the configuration agent and from a configuration orchestrator, instructions to invoke a protocol to swap the current ciphersuite. The method can further include invoking, by the configuration agent, the protocol to swap the current ciphersuite. The method can further include communicating, by a quantum secure layer (QSL) agent, a next ciphersuite from a set of ciphersuites to a key distribution center (KDC). The next ciphersuite can comprise a post-quantum ciphersuite, such as a next asymmetric or symmetric algorithm, cryptographic random number generator, or cryptographic hash function. The method can further include replacing the current ciphersuite with the next ciphersuite and performing cryptography based on the next ciphersuite.

Abstract: A method of enabling custom cryptography is provided. The method can include sending, by a first computing device and to a second computing device, instructions to initiate a proxy. The proxy can be configured to intercept a message of a user agent. The user agent may be associated with the second computing device. The proxy can be further configured to perform custom cryptography based on the message to obtain a modified message. The custom cryptography may comprise post-quantum cryptography. The proxy can be further configured to send the modified message to at least one of the user agent, a reverse proxy, or a third computing device. The post-quantum custom encryption and/or decryption can comprise Quantum Secure Layer (QSL), Post-Quantum Transport Layer Security (PQTLS), Kyber, SABER, Enhanced McEliece, RLCE, or a National Institute of Standards and Technology (NIST) candidate post-quantum algorithm.

Abstract: A method of cryptography is provided. The method can include executing portable binary instructions within a secure virtualized environment of a user agent, such as a web browser or another client application, to perform post-quantum custom encryption and/or decryption of a user request and/or a request response. The post-quantum custom encryption and/or decryption can comprise Quantum Secure Layer (QSL), Post-Quantum Transport Layer Security (PQTLS), Kyber, SABER, Enhanced McEliece, RLCE, or a National Institute of Standards and Technology (NIST) candidate post-quantum algorithm. The portable binary instructions may comprise a bytecode. The secure virtualized environment can comprise an independent context of execution within the user agent, with an independent memory space. For example, the independent context of execution may comprise a virtual machine (VM) and/or a portable binary or bytecode interpreter.

Abstract: A method of custom cryptography is provided. The method can include receiving, by a loader site from a second computing device, a forwarded request of a third computing device. The forwarded request may not satisfy a security condition. The method can further include sending, by the loader site to the third computing device, a persistent service worker configured to initiate a proxy service. The proxy service may be configured to perform post-quantum custom cryptography. The post-quantum custom encryption and/or decryption can comprise Quantum Secure Layer (QSL), Post-Quantum Transport Layer Security (PQTLS), Kyber, SABER, Enhanced McEliece, RLCE, or a National Institute of Standards and Technology (NIST) candidate post-quantum algorithm, the persistent service worker may be configured to persist from a first browser session to a subsequent browser session of the third computing device. The persistent service worker can comprise a web worker or script instructions.

Abstract: A data security management system, having a communications interface operatively coupled to a network comprising a plurality of nodes, wherein a first node is configured to process at least one portion of data in the network; and a computing device operatively coupled to the communications interface, wherein the computing device is configured to: receive at least one portion of the data; apply to the data at least one cryptographic algorithm; generate the at least one portion of the data in encrypted forms produced by the at least one cryptographic algorithm; and transmit the at least one portion of data in encrypted forms to at least one second node of the network via the communications interface, wherein the cryptographic algorithm is a post-quantum cryptographic algorithm.

Abstract: A Data Security Management System using a communications interface configured to receive and transmit one or more portions of Post Quantum Resistant Encrypted data within a network comprising a plurality of endpoints. Using End-to-End (E2E) Post Quantum Resistant encryption techniques to protect the data, the Data Security Management System provides the flexibility for multiple data schemes in a distributive environment such as, but not limited to, Hyperledger. The system uses a Policy Manager to perform the base configuration of the session to be transmitted or received in an encrypted state. This encrypted state comprises Post Quantum Cryptographic algorithm in use for that session, inclusive with associated keys or digital signatures. The Policy Manager is further configured to verify an identity of endpoint by a multifactor cryptographic authentication mechanism or a biometric authentication mechanism to validate a connection to or from an endpoint.

Abstract: A Data Security Management System using a communications interface configured to receive and transmit one or more portions of Post Quantum Resistant Encrypted data within a network comprising a plurality of endpoints. Using End-to-End (E2E) Post Quantum Resistant encryption techniques to protect the data, the Data Security Management System provides the flexibility for multiple data schemes in a distributive environment such as, but not limited to, Hyperledger. The system uses a Policy Manager to perform the base configuration of the session to be transmitted or received in an encrypted state. This encrypted state comprises Post Quantum Cryptographic algorithm in use for that session, inclusive with associated keys or digital signatures. The Policy Manager is further configured to verify an identity of endpoint by a multifactor cryptographic authentication mechanism or a biometric authentication mechanism to validate a connection to or from an endpoint.