Feranor

Post-quantum cryptography, today

Feranor PQC Suite encrypts, decrypts, signs and verifies your data with post-quantum algorithms, hybrid with classical ones as ANSSI recommends, so that what you protect today stays protected once quantum computers can break RSA and elliptic curves.

It writes and reads standard formats only: CMS messages (RFC 5652), keys as SubjectPublicKeyInfo and PKCS#8. No primitive is reimplemented: they come from the platform, OpenSSL 3.5 on Linux, with no third-party cryptographic library.

The ANSSI profile applies by default, to what is read as much as to what is written: a message, a key or a signature outside it is refused, so a correspondent cannot impose a weaker algorithm.

Why now

Data encrypted today can be collected now and decrypted later, once quantum computers are able to. The transition has dates, and that data must stay confidential long after them.

• 2027: ANSSI aims at post-quantum cryptography for qualification
• 11 December 2027: every obligation of the Cyber Resilience Act applies
• End of 2030: high-risk uses migrated, in the coordinated roadmap of the EU Member States
• After 2030: ANSSI advises against purchases without post-quantum cryptography
• End of 2035: medium-risk uses migrated

Cryptography and standards

• Key establishment: ML-KEM only as a hybrid with ECDH, MLKEM1024-ECDH-P384 by default
• Content: AES-256-GCM in memory, AES-256-CBC then HMAC-SHA-512 for streams of any size
• Signature: SLH-DSA, hybrid by default with an ECDSA P-384 co-signature
• Integrity first: a modified message is refused before any byte in clear is written
• Standards: CMS (RFC 5652, 5083, 9629), ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205), composite ML-KEM (IETF LAMPS drafts), checked against the official NIST vectors and the RFC examples

A Standard profile also accepts ML-KEM and ML-DSA alone, for partners outside the ANSSI framework.

Compliance and trust

• ANSSI: the default profile follows the Guide des mécanismes cryptographiques (ANSSI-PG-083, version 3.00) and its post-quantum recommendations, hybridization included
• Cyber Resilience Act: vulnerability handling, a CycloneDX software bill of materials for every component, security fixes free of charge for every user of a supported version
• A verifiable delivery: the checksums of every release are signed with Feranor's release certificate (SLH-DSA-SHA2-256s)
• Nothing calls Feranor: the license key is checked offline, with no telemetry; it conditions no cryptographic function

The release certificate and the published versions

Platforms

• Linux x64 with OpenSSL 3.5 or later: every algorithm and every component
• Containers (Docker, Kubernetes): minimal images without shell, non-root, the sidecar next to the application
• Windows 11 and Windows Server: the SDK and the command line for encryption; no SLH-DSA, so no signature under the ANSSI profile
• Support: 5 years of maintenance per major version, by e-mail in French or English; messages and keys stay readable across versions

Pricing

One price, everything included, as an annual subscription per legal entity, whatever the number of applications, servers or developers.

• Company or private organization: €20,000 excl. VAT a year
• Public sector, local authority, public body, hospital, administration: €18,000 excl. VAT a year
• Group: the price above for each legal entity that uses the product
• Integration into a product resold to third parties, software vendors and IT services firms: on quotation

The four components, every version released during the subscription, and support.