Cloudflare
CIRCL (Cloudflare Interoperable Reusable Cryptographic Library) is Cloudflare Go-based cryptographic library with production PQC support. It powers post-quantum TLS on Cloudflare edge network, one of the largest PQC deployments in the world, operating at public edge-network scale.
Evidence source: Dated snapshot
Ranking withheld. A fresh, verified proof must match this dated catalog.
Registry record instrument for CIRCL by Cloudflare: an independent Qtonic Quantum composite score of 79.8 out of 100 across ten dimensions, with KEM modality and NIST level 1, 3, 5. Independent evaluation — not live customer telemetry and not a live scan of a deployed instance.10/10, 10.0/10
10/10
7/10
6/10, 5.0/10
8/10
8/10, 7.7/10
10/10
7/10
10/10, 8/10, 5.5/10
10/10, 10/10, 5.0/10
HIPAA
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential fit for ePHI-in-transit review on systems handling laboratory results, imaging, and patient communications. (partial alignment — verify with compliance team before production deployment)
PCI DSS 4.0.1
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential PCI DSS 4.0.1 post-quantum review relevance for card-present transaction encryption and cardholder data environments. (partial alignment — verify with compliance team before production deployment)
CNSA 2.0
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential CNSA 2.0 review relevance for defense contractor and federal agency deployment planning. (partial alignment — verify with compliance team before production deployment)
FIPS 203/204/205
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential FIPS 203/204/205 review relevance for federal systems and regulated financial or healthcare environments.
QSolve builds your path to January 1, 2029 readiness.
Qtonic Quantum QSolve advisors work alongside your CISO, board, and compliance teams — selecting the right vendor from this registry, managing the competitive evaluation, and requiring quarterly PQC training through your 2029 readiness date.
Request an assessment →FIPS 203 (ML-KEM)
NIST — Pass
FIPS 204 (ML-DSA)
NIST — Pass
FIPS 205 (SLH-DSA)
NIST — Fail
CNSA 2.0
NSA — Partial
NSM-10
White House — Partial
EO 14028
White House — Partial
PCI DSS 4.0.1
PCI SSC — Partial
HIPAA
HHS — Partial
GDPR
EU — N/A
POPIA
South Africa — N/A
PDPA
Singapore — N/A
LGPD
Brazil — N/A
Last evaluated: October 5, 2026
Status: active
Use QScout public intake for a verified website snapshot, then scope a QScout engagement when approved evidence is needed for inventory, roadmap, and remediation decisions.
Amazon Web Services
AWS-LC is Amazon general-purpose cryptographic library, forked from BoringSSL, with production PQC support. It has FIPS 140-3 validation reported in source material and powers PQC across all AWS services including KMS, S3, and CloudFront, operating at public edge-network scale.
Last evaluated: Oct 5, 2026
Legion of the Bouncy Castle
Bouncy Castle is the dominant cryptographic library for Java and C# ecosystems, with over two decades of production use. Its PQC module provides comprehensive coverage of all NIST-standardized algorithms plus candidates, with full X.509, CMS, and TLS integration for enterprise deployments.
Last evaluated: Oct 5, 2026
HQC Team
NIST Round 4 code-based KEM candidate. Under evaluation for potential standardization.
Last evaluated: Oct 5, 2026
We evaluate PQC solutions on request. Submit a vendor for review and we will route it through the Qtonic Quantum Lab intake queue.
Qtonic Quantum Lab scores are generated through automated evaluation using publicly available evidence. Scores reflect conditions at the time of evaluation and may change as solutions evolve. Vendors may request a retest at any time. See our fidelity commitment for full details.
Some infrastructure assurance belongs to the underlying provider. It supports buyer diligence, but it is not a Qtonic Quantum-held certification or attestation.
Qtonic Quantum Lab scores are independent research opinions based on a published rubric and publicly available evidence. Provenance labels disclose the review state. No vendor pays for inclusion, ranking, or evaluation. Scores are not endorsements, certifications, warranties, or legal advice. Read the published methodology or the full research disclaimer.