🛡️ PQ-Audit

Automating Post-Quantum Cryptography Migration with Zero-Trust Static Analysis

---

🚨 The Threat Model: Harvest Now, Decrypt Later (HNDL)

The quantum threat is not a distant possibility; it is a present reality. Adversaries are currently executing "Harvest Now, Decrypt Later" (HNDL) attacks—systematically intercepting and storing encrypted enterprise traffic. The moment Cryptographically Relevant Quantum Computers (CRQCs) come online, this vast reservoir of stolen data will be decrypted, exposing trade secrets, personal information, and classified communications. If your data has long-term value, it is already compromised if not protected by Post-Quantum Cryptography (PQC).

✨ Key Features

• 🔍 Zero-Trust Static Analysis: High-precision AST parsing and regex heuristics to identify legacy cryptographic primitives across your entire codebase.
• 📊 SARIF v2.1.0 Integration: Seamless integration with CI/CD pipelines, outputting standardized results for modern security dashboards.
• 🧠 Quantum-Inspired Optimization: Advanced scheduling algorithms to prioritize and optimize your migration roadmap.
• 🛡️ NIST FIPS 203/204/205 Mapping: Automatically maps detected vulnerabilities to recommended NIST standardized post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA).
• 🔄 Hybrid Composite Mode: Identifies opportunities for hybrid cryptographic implementations to ensure compliance and backwards compatibility.

🏗️ Architecture

graph TD
    A[Code Repository] -->|Checkout| B(AST Parser & Heuristics)
    B --> C{Vulnerability Mapping}
    C -->|Legacy Crypto Detected| D[Quantum-Inspired Optimization]
    C -->|Secure| E[Pass]
    D --> F[NIST FIPS 203/204/205 Recommendations]
    F --> G(SARIF v2.1.0 Output)
    G --> H[CI/CD Security Dashboard]
    
    style A fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff
    style B fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff
    style C fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff
    style D fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff
    style F fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff
    style G fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff
    style H fill:#2d3748,stroke:#4fd1c5,stroke-width:2px,color:#fff

Loading

🚀 Installation & Quickstart

# Clone the repository
git clone https://github.com/owner/PQ-Audit.git
cd PQ-Audit

# Create a virtual environment and activate it
python -m venv venv
source venv/bin/activate  # On Windows, use `venv\Scripts\activate`

# Install dependencies
pip install -r requirements.txt

# Run the analyzer on a target directory
python main.py analyze /path/to/your/codebase --output report.sarif

🎥 Demo

---

Built for the Quantum Era.