Application-Embedded Post-Quantum Security

ODRE PQC

Hide the complexity.
Install the security boundary.

A Post-Quantum Security Boundary embedded inside FastAPI applications. Protected routes execute only when PQC protection is healthy.

ML-KEM-768ML-DSA-65FAIL-CLOSEDPRE-HANDLER PROTECTIONNO CLASSIC DOWNGRADE
Quick Start Technical Whitepaperv0.2.0 View Evidence
ODRE SECURITY BOUNDARY
ODRE
PQC
APPLICATION
ODRE PQC · FAIL-CLOSED SECURITY BOUNDARY
PQC PROVIDER · OPERATING SYSTEM
FastAPI Post-Quantum Security

Post-quantum API protection,
embedded in your FastAPI application.

ODRE PQC provides an application-embedded security boundary for FastAPI. The verified v0.2.0 scope combines ML-KEM-768, ML-DSA-65, strict sequence enforcement and selective fail-closed protection for /secure/*, with no silent classical-only downgrade. Integration remains install(app).

The Boundary

Business logic does not execute
until protection is verified.

ODRE PQC is not merely a list of cryptographic algorithms. Its purpose is to place a verifiable security boundary in front of protected application routes.

01 · SELECTIVE FAIL-CLOSED
/secure/* is BLOCKED when protection failsRequests are not delivered to protected handlers when the PQC provider, keys, session or replay state is not healthy.
02 · PUBLIC ROUTE ISOLATION
Protected routes close; public routes keep customer policyPQC failure does not unnecessarily stop the entire FastAPI service. Protected and public areas remain isolated.
03 · STRICT SEQUENCE
Only the exact next sequence is acceptedReplay, rollback, gap and mismatch conditions are rejected before the business handler is entered.
04 · NO SILENT FALLBACK
No silent downgrade when PQC is unavailableODRE PQC does not silently fall back to classical-only protection. If protection cannot be provided, the protected route closes.
Operator Experience

Diagnose. Verify. Monitor.

Three commands expose installation health and actual protection status without requiring operators to assemble the cryptography themselves.

01 · DIAGNOSE

Doctor

Diagnoses Python, provider, keys, database, permissions and security policy across the installation environment.

$ odre-pqc doctor
ALL CLEAR → READY
02 · VERIFY

Verify

Self-tests actual PQC operations, handshake, session encryption and replay/tamper rejection.

$ odre-pqc verify
ALL PASS → VERIFIED
03 · MONITOR

Status

Read-only visibility into runtime, security boundary, key health, expiry warnings and current protection state.

$ odre-pqc status
PQC PROTECTION: ON
DOCTOR→VERIFY→STATUS→Return to DOCTOR when an anomaly is found
Verification Evidence

Show the verification results, not just the claim.

The public page does not claim security beyond the scope that has actually been verified.

60/60Windows clean-room security regression PASS
60/60Ubuntu clean-room security regression PASS
20/20Cross-platform parity PASS
0 / 0Handler bypasses · Windows / Ubuntu

※ v0.2.0 evidence: Windows development regression 61/61, Windows clean-room 60/60, Ubuntu clean-room 60/60, platform parity 20/20, handler bypass 0 on both platforms, automatic classical downgrade 0, and no new Critical/High/Medium findings. Verification is scoped evidence, not a claim of absolute security.

One-Line Integration

You install it.
ODRE handles the complexity.

After the Wheel installation passes Doctor and Verify, the public integration API for an existing FastAPI application remains a single call.

FastAPI · Pythoninstall(app)
from fastapi import FastAPI
from odre_pqc import install

app = FastAPI()

# ODRE PQC Security Boundary
install(app)

# /secure/* → PQC REQUIRED + FAIL-CLOSED
Platform Roadmap

Same API. Same security contract.
Operating-system differences stay inside.

Only environments that pass actual clean-room verification are marked VERIFIED.

Windows Server 2022 · AMD64
v0.2.0 · Python 3.12
VERIFIED
Ubuntu 24.04 LTS · AMD64
v0.2.0 · Python 3.12
VERIFIED

Officially verified: Windows Server 2022 AMD64 / Python 3.12 and Ubuntu 24.04 LTS AMD64 / Python 3.12. Ubuntu 22.04, Debian 12, other Linux distributions, and ARM64 are NOT_VERIFIED.

Enterprise Preview

Post-Quantum Security,
Embedded in Your Application.

ODRE PQC is not a primitive-only cryptography library. It is designed as an Application-Embedded Security Boundary spanning installation, diagnosis, verification and operation.

Enterprise PoC Inquiry