HL·00HalitePost-quantum security labRuns in your browser

Quantum breaks today's locks.
Try tomorrow's.

A large quantum computer will open the public-key cryptography behind today's data, logins and wallets. Halite builds the replacement on NIST's lattice standards, and you can test it here, in your browser.

Seal something now Check a Solana wallet

StandardsFIPS 203 · 204 · 205
Tools6, no account
Your keysnever leave this tab

Fig. 1 A salt crystal, 5 × 5 × 5 cells, one missing. ML-KEM-768 hides a key in a lattice of 768 dimensions. This one has three.

HL·01The threatAssay by algorithm

Shor's algorithm breaks the math under RSA and elliptic curves.

Secure connections, software updates, certificates and crypto wallets rely on two problems: factoring large numbers and computing discrete logarithms. A large, error-corrected quantum computer solves both efficiently. Symmetric ciphers and hashes survive, but lose about half their strength to Grover's algorithm.

Classical strength from NIST SP 800-57 Part 1. Grover figures are the theoretical upper bound; in practice the attack parallelises poorly.

Choose an algorithm

Classical attacker0 bits

Quantum attacker0 bits

broken

HL·02Harvest now, decrypt laterMosca's rule

Traffic recorded today can be opened later.

An attacker does not need a quantum computer yet. They only need to store your encrypted traffic until one exists. If the years your data must stay secret (x) plus the years your migration takes (y) exceed the years until a quantum attacker arrives (z), that data is already exposed.

x Data must stay secret10 yrs y Your migration takes5 yrs z Your estimate until a quantum attacker12 yrs

These are your own assumptions. Nobody can give z with confidence; the roadmap below shows what is known.

HL·03What is at stakeThree drawers

What a quantum attacker can reach.

Halite's work is organised around the three things public-key cryptography protects. Open a drawer to see what breaks and what Halite does about it.

HL·04The approachX-Wing hybrid

Hybrid by default. An attacker has to break both.

ML-KEM is young. X25519 is well studied but falls to a quantum computer. Halite combines them, the same way Chrome, Signal and OpenSSH now do, so a flaw in either one alone does not expose your key. Select a step to see what it does.

HL·05Why lattices2 dimensions of 768

The secret is a good map of the grid.

ML-KEM and ML-DSA hide keys in lattices. Finding the lattice point closest to a target is easy with a short, near-square basis and hard with a long, skewed one. The private key is the good basis; the public key only reveals a bad one.

Click anywhere on the grid to place a target.

This demo has 2 dimensions. ML-KEM-768 works in 768, where the bad basis is hopeless.

HL·06The LabSix tools, no account

Six working tools on one bench.

No account, no install. Keys exist only in your browser tab and disappear when you close it. Pick a tool to jump straight in.

Open the Lab

HL·07RoadmapCore sample, 1994 to 2035

The quantum clock, and what Halite does at each mark.

Read it like a core sample: published research, standards and deadlines above the line, each with its source; Halite's plan below it. Plans are targets and can change.

Quantum & standards

Halite

HL·08$HALITESolana

One coin. One official address.

$HALITE is the project's coin. The Lab is free and works without it: no tool asks for a wallet signature or a payment.

Tokens can go to zero. Nothing on this site is financial advice. Copycat coins appear around every launch: trust only the address shown in this box.

HL·09QuestionsBefore you trust a new lock

What people ask before they trust a new lock.

Start with one file.

Seal something you care about with a hybrid post-quantum key, keep the key file, and open it again. It takes under a minute.

Seal a file in the Vault Read the roadmap

Quantum breaks today's locks. Try tomorrow's.