quantum-auth

README

QuantumAuth

Military-Grade Post-Quantum Authentication Framework

QuantumAuth is the world's first fully integrated TPM + Post-Quantum (PQ) signature authentication system, designed to eliminate passwords, prevent replay attacks, and guarantee identity at the hardware level.

QuantumAuth provides:

• TPM-backed hardware signatures
• ML-DSA-65 post-quantum signatures (CIRCL)
• Argon2id quantum-resistant password hashing
• Replay protection via challenges
• Strict canonical request signing
• Zero bearer tokens
• Zero trust, zero reuse, zero impersonation

This is authentication at a level previously considered “military-only”.

---

🚀 Architecture Overview

QuantumAuth consists of:

1. QuantumAuth Server (Go)

Handles:

• User management
• Device registration (TPM + PQ public keys)
• Challenge generation & verification
• Secure middleware
• Replay protection
• Database (CockroachDB)

2. QuantumAuth Client (Cross-Platform Service)

Runs locally on user devices:

• TPM key management
• PQ keypair generation
• Challenge signing
• CLI + local web dashboard
• Provides signed headers to any app

3. Zero-Trust Integration

Any third-party server can authenticate requests by forwarding:

Authorization: QuantumAuth user="...", device="...", ts="...", nonce="...", sig_tpm="...", sig_pq="..."

Zero passwords.
Zero secrets stored on servers.
Zero attack surface.

---

📦 Installation (coming soon)

A full client installer will be provided for:

• Linux
• macOS (Intel + M1/M2)
• Windows
• Android
• iOS (via app extension)

---

📜 License

This project is licensed under the Apache License 2.0 (see LICENSE).

Commercial licenses are available for SaaS companies, cybersecurity firms, and enterprises.
See COMMERCIAL-LICENSE.md or contact:

Ian Dorion
📧 ian.dorion@quantumauth.io

---

🏛 Attribution Requirement

If you use QuantumAuth in a product, website, or service, include:

Powered by QuantumAuth — created by Ian Dorion (Madeindreams) https://github.com/Madeindreams/quantum-auth

This is required by the NOTICE file and Apache 2.0.

---

🤝 Contributing

See CONTRIBUTING.md.

---

🔐 Security

See SECURITY.md for vulnerability reporting.

💖 Sponsors

QuantumAuth is an independent, open-source project focused on building modern, hardware-rooted authentication for developers and users everywhere.
Your sponsorship helps fund ongoing development, security research, cross-platform clients, and long-term maintenance.

🙌 Thank you to our supporters

We are deeply grateful to everyone who helps sustain this project.
If you rely on QuantumAuth or believe in our mission, please consider becoming a sponsor.

👉 Become a sponsor: https://github.com/sponsors/quantumauth-io

---

🏆 Project Sponsors

This section will list the names or logos of organizations and individuals who sponsor QuantumAuth at the Project Sponsor tier and above.

If you'd like to be featured here, please visit our Sponsor page!