Google Tink is a multi-language cryptographic library focused on misuse-resistant API design. Its PQC module provides hybrid ML-KEM-768 key exchange and HPKE integration, bringing Google opinionated approach to secure-by-default PQC to Java, Go, C++, and Python developers.
Evidence source: Dated snapshot
Ranking withheld. A fresh, verified proof must match this dated catalog.
Registry record instrument for Google Tink PQ by Google: an independent Qtonic Quantum composite score of 82.5 out of 100 across ten dimensions, with Protocol modality and NIST level 3. Independent evaluation — not live customer telemetry and not a live scan of a deployed instance.10/10, 10.0/10
10/10
9/10
7/10, 5.0/10
8/10
6/10, 7.5/10
10/10
7/10
10/10, 8/10, 5.5/10
9/10, 0/10, 4.5/10
HIPAA
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential fit for ePHI-in-transit review on systems handling laboratory results, imaging, and patient communications. (partial alignment — verify with compliance team before production deployment)
PCI DSS 4.0.1
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential PCI DSS 4.0.1 post-quantum review relevance for card-present transaction encryption and cardholder data environments. (partial alignment — verify with compliance team before production deployment)
FIPS 203/204/205
Technical evidence supports compliance review; this is not a legal compliance determination. Evidence indicates potential FIPS 203/204/205 review relevance for federal systems and regulated financial or healthcare environments.
QSolve builds your path to January 1, 2029 readiness.
Qtonic Quantum QSolve advisors work alongside your CISO, board, and compliance teams — selecting the right vendor from this registry, managing the competitive evaluation, and requiring quarterly PQC training through your 2029 readiness date.
Request an assessment →FIPS 203 (ML-KEM)
NIST — Pass
FIPS 204 (ML-DSA)
NIST — N/A
FIPS 205 (SLH-DSA)
NIST — N/A
CNSA 2.0
NSA — Fail
NSM-10
White House — Partial
EO 14028
White House — Partial
PCI DSS 4.0.1
PCI SSC — Partial
HIPAA
HHS — Partial
GDPR
EU — N/A
POPIA
South Africa — N/A
PDPA
Singapore — N/A
LGPD
Brazil — N/A
Last evaluated: October 5, 2026
Status: active
Use QScout public intake for a verified website snapshot, then scope a QScout engagement when approved evidence is needed for inventory, roadmap, and remediation decisions.
Apple
Apple iMessage PQ3 protocol with post-quantum ratcheting for end-to-end encryption.
Last evaluated: Oct 5, 2026
Amazon Web Services
AWS Key Management Service with PQ TLS provides FIPS 140-3 Level 3 validation reported in source material post-quantum key exchange for one of the most widely deployed cloud key management services. It offers transparent PQ TLS protection for all KMS API calls via AWS SDK, backed by dedicated HSMs.
Last evaluated: Oct 5, 2026
Hybrid ML-KEM enabled by default in Chrome. 93% of Chrome requests PQC-ready.
Last evaluated: Oct 5, 2026
We evaluate PQC solutions on request. Submit a vendor for review and we will route it through the Qtonic Quantum Lab intake queue.
Qtonic Quantum Lab scores are generated through automated evaluation using publicly available evidence. Scores reflect conditions at the time of evaluation and may change as solutions evolve. Vendors may request a retest at any time. See our fidelity commitment for full details.
Some infrastructure assurance belongs to the underlying provider. It supports buyer diligence, but it is not a Qtonic Quantum-held certification or attestation.
Qtonic Quantum Lab scores are independent research opinions based on a published rubric and publicly available evidence. Provenance labels disclose the review state. No vendor pays for inclusion, ranking, or evaluation. Scores are not endorsements, certifications, warranties, or legal advice. Read the published methodology or the full research disclaimer.