Key Vault
Qkrypt generates, stores, rotates, and revokes post quantum keys for First National Bank. Private key material is encrypted at rest with AES-256-GCM under a PBKDF2-HMAC-SHA256 derived wrapping key. Every algorithm in the vault is post quantum: ML-KEM for key encapsulation, ML-DSA for digital signatures.
Demonstration vault. Key material is simulated in memory and sized to match real algorithm
parameters. No signing or encapsulation is performed.
20
Total Keys
15
Active
3
Archived
2
Revoked
Algorithm Distribution
ML-KEM-1024
6 / 20
ML-KEM-768
5 / 20
ML-DSA-87
6 / 20
ML-DSA-65
3 / 20
Algorithm Posture
Preferred KEM
ML-KEM-1024
Preferred SIG
ML-DSA-87
Legacy KEM
ML-KEM-768
Legacy SIG
ML-DSA-65
New keys should use the preferred tier. Legacy tier keys remain valid and are scheduled for rotation onto the preferred parameter sets.
All Keys
Newest first| Key ID | Name | Algorithm | Type | Status | Created |
|---|---|---|---|---|---|
| d486f038… | FNB TLS Key 2026 | ML-KEM-1024 | KEM | ACTIVE | 2026-10-21 |
| 33ac57ff… | Intern Portal Key | ML-KEM-768 | KEM | ACTIVE | 2026-10-17 |
| cf34e09f… | DR Site Key | ML-KEM-768 | KEM | ACTIVE | 2026-10-14 |
| 3d6597b0… | Backup Encryption Key | ML-KEM-1024 | KEM | ACTIVE | 2026-10-09 |
| bc28138c… | Code Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-10-04 |
| f77a5641… | Qwall Policy Key | ML-DSA-65 | SIG | ACTIVE | 2026-09-29 |
| 85888ef8… | Qledger Signing Key | ML-DSA-65 | SIG | ACTIVE | 2026-09-24 |
| 684c0646… | Qveil Session Key | ML-KEM-768 | KEM | ACTIVE | 2026-09-19 |
| bfa30287… | QDiscover TLS Key | ML-KEM-1024 | KEM | ACTIVE | 2026-09-14 |
| c13f7a68… | Audit Log Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-09-09 |
| cbad14e9… | Compromised Dev Key | ML-DSA-87 | SIG | REVOKED | 2026-09-04 |
| c11aadfd… | Vault Encryption Key | ML-KEM-1024 | KEM | ACTIVE | 2026-08-25 |
| 5d2c8496… | Mobile App Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-08-10 |
| 3beb9f9f… | API Gateway Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-07-26 |
| 02cfabb9… | Decommissioned Service Key | ML-KEM-768 | KEM | REVOKED | 2026-07-16 |
| b2d18d4c… | FNB TLS Key 2025 (archived) | ML-KEM-1024 | KEM | ARCHIVED | 2026-06-26 |
| 6db02453… | FNB TLS Key 2025 | ML-KEM-1024 | KEM | ACTIVE | 2026-06-26 |
| 9a37fdc4… | FNB Root Signing Key | ML-DSA-87 | SIG | ACTIVE | 2026-04-27 |
| 3637d960… | Legacy API Signing Key (archived) | ML-DSA-65 | SIG | ARCHIVED | 2026-04-07 |
| 3028a01c… | Old Vault Key (archived) | ML-KEM-768 | KEM | ARCHIVED | 2025-12-28 |