Key Vault
Qkrypt generates, stores, rotates, and revokes post quantum keys for First National Bank. Private key material is encrypted at rest with AES-256-GCM under a PBKDF2-HMAC-SHA256 derived wrapping key. Every algorithm in the vault is post quantum: ML-KEM for key encapsulation, ML-DSA for digital signatures.
Demonstration vault. Key material is simulated in memory and sized to match real algorithm
parameters. No signing or encapsulation is performed.
20
Total Keys
15
Active
3
Archived
2
Revoked
Algorithm Distribution
ML-KEM-1024
6 / 20
ML-KEM-768
5 / 20
ML-DSA-87
6 / 20
ML-DSA-65
3 / 20
Algorithm Posture
Preferred KEM
ML-KEM-1024
Preferred SIG
ML-DSA-87
Legacy KEM
ML-KEM-768
Legacy SIG
ML-DSA-65
New keys should use the preferred tier. Legacy tier keys remain valid and are scheduled for rotation onto the preferred parameter sets.
All Keys
Newest first| Key ID | Name | Algorithm | Type | Status | Created |
|---|---|---|---|---|---|
| cdc88775… | FNB TLS Key 2026 | ML-KEM-1024 | KEM | ACTIVE | 2026-09-08 |
| 46c99cf8… | Intern Portal Key | ML-KEM-768 | KEM | ACTIVE | 2026-09-04 |
| ad5017e5… | DR Site Key | ML-KEM-768 | KEM | ACTIVE | 2026-09-01 |
| 4747ae60… | Backup Encryption Key | ML-KEM-1024 | KEM | ACTIVE | 2026-08-27 |
| 71aca612… | Code Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-08-22 |
| d412c5c8… | Qwall Policy Key | ML-DSA-65 | SIG | ACTIVE | 2026-08-17 |
| 8bfe6c24… | Qledger Signing Key | ML-DSA-65 | SIG | ACTIVE | 2026-08-12 |
| 5e41c05d… | Qveil Session Key | ML-KEM-768 | KEM | ACTIVE | 2026-08-07 |
| e321dfe8… | QDiscover TLS Key | ML-KEM-1024 | KEM | ACTIVE | 2026-08-02 |
| 57dfd062… | Audit Log Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-07-28 |
| e682a99d… | Compromised Dev Key | ML-DSA-87 | SIG | REVOKED | 2026-07-23 |
| c2ef1a2c… | Vault Encryption Key | ML-KEM-1024 | KEM | ACTIVE | 2026-07-13 |
| 37fa4fcf… | Mobile App Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-06-28 |
| fc9eeb6c… | API Gateway Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-06-13 |
| 3e42ef53… | Decommissioned Service Key | ML-KEM-768 | KEM | REVOKED | 2026-06-03 |
| 0ddd51d6… | FNB TLS Key 2025 (archived) | ML-KEM-1024 | KEM | ARCHIVED | 2026-05-14 |
| 53cf05dd… | FNB TLS Key 2025 | ML-KEM-1024 | KEM | ACTIVE | 2026-05-14 |
| d10d591d… | FNB Root Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-03-15 |
| 26b69bb2… | Legacy API Signing Key (archived) | ML-DSA-65 | SIG | ARCHIVED | 2026-02-23 |
| 77b9e64d… | Old Vault Key (archived) | ML-KEM-768 | KEM | ARCHIVED | 2025-11-15 |