Advanced Cryptography
& Security Solutions

High-performance cryptographic primitives, quantum-resilient protocols, formal verification, and zero-knowledge infrastructure.

GitHub

120K+ package downloads·1K+ GitHub stars·11 trusted partners

What we build

Cryptographic libraries, secure protocols and zero-knowledge infrastructure, with formal verification as a service.

OpenCrypt

Open source

A cryptography library for symmetric and asymmetric algorithms. Processor-specific code paths keep it fast on embedded systems and on the architectures most servers run.

  • ML-KEM and ML-DSA with leading performance
  • Fast implementations of widely used ciphers, based on our own research
  • 100% safe Rust, with a pure-Rust fallback wherever platform intrinsics are used
  • Constant-time and side-channel resistant

Source PQC paper

SecTLS

Open source

High-performance TLS 1.3 and QUIC with post-quantum key exchange, built so that teams can move off older protocols one step at a time.

  • Full TLS 1.3 compliance
  • Native QUIC support
  • Hybrid post-quantum key exchange
  • A migration path from legacy protocols

Source

OpenZKVM

Open source

A zero-knowledge VM built on ZK IR, a field-native instruction set over the Baby Bear field. Code in any LLVM-supported language compiles to it through our LLVM backend, and the prover produces succinct STARK proofs.

  • Field-native instruction set
  • LLVM backend to ZK IR

openzkvm zkir-llvm zkir-prover Paper

Formal verification

Service

Machine-checked proofs that cryptographic operations and other security-critical components do what the standard says. We also build AI-assisted tools that check an implementation's behavior against the standard it claims to follow.

  • Implementations proven correct against the standard specifications
  • IDE extensions for checking proofs
  • AI-assisted checks of semantic conformance
  • Trusted in major production environments

Paper: LLM-as-Specification-Judge

Loading charts...

Zero-knowledge infrastructure

OpenZKVM runs programs compiled to ZK IR, an instruction set we designed for STARK proving, and proves that they ran correctly. The design is described in our paper.

  1. Your program

    Rust, C, C++, Go or any other LLVM language

  2. zkir-llvm

    LLVM backend that emits ZK IR bytecode

  3. ZK IR

    Field-native instructions over Baby Bear, few constraints each

  4. zkir-prover

    Executes the program and proves it with Plonky3 STARKs

Loading benchmarks...

Contact

Tell us what you're working on, or book a call.

What we can help with

Code audits
Review of cryptographic code for correctness, misuse of primitives and timing leaks.
Post-quantum migration
Finding where you depend on RSA and elliptic curves, then moving to ML-KEM and ML-DSA in stages, starting with hybrid key exchange.
Formal verification
Machine-checked proofs that your implementation matches the specification it follows.
Custom implementations
Primitives and protocols written for your platform and tuned to your performance targets.
Zero-knowledge systems
Circuits and proving pipelines, built on what we learned developing OpenZKVM.
Security consulting
Design reviews for systems that rely on cryptography: choice of primitives, key management and failure modes.
Training
Courses for engineering teams on post-quantum cryptography, constant-time programming and formal methods.

Book a call

Pick a time on our calendar and we'll talk through what you need.

Book a meeting

Offices

Milan
Via Monte Sabatino, 1
20092, MI, Italy
Prague
Karolinská 654/2
18600 Prague, Czech Republic