liboqs — Qtonic Quantum Score 82.7/100 | Qtonic Quantum Lab

Back to Registry

API CheckingRegistry CheckingTrust Checking

liboqs

Qtonic Quantum Evaluated

Open Quantum Safe

KEMCNSA 2.0

Evidence source: Live API

82.7

Rank unavailable

Score Radar

Overview

The Open Quantum Safe project liboqs library is the most widely used open-source PQC library. It provides C implementations of all NIST-standardized and Round 4 candidate algorithms with a unified API, serving as the foundation for numerous PQC integrations across the ecosystem.

Algorithms

ML-KEM-512ML-KEM-768ML-KEM-1024ML-DSA-44ML-DSA-65ML-DSA-87SLH-DSABIKEClassic McElieceFrodoKEMHQC

Languages

C

NIST Level1, 3, 5

LicenseMIT

RepositorySource

Dimension Breakdown

Algorithm CorrectnessVerified

9.1/10

Verify email for evidence chains and agent vote details

PerformanceVerified

7.3/10

Verify email for evidence chains and agent vote details

Key & Ciphertext SizeVerified

7.9/10

Verify email for evidence chains and agent vote details

Side Channel ResistanceInferred

6.1/10

Verify email for evidence chains and agent vote details

InteroperabilityVerified

9.1/10

Verify email for evidence chains and agent vote details

Standards ComplianceVerified

8.2/10

Verify email for evidence chains and agent vote details

MaturityVerified

9.1/10

Verify email for evidence chains and agent vote details

DocumentationVerified

8.1/10

Verify email for evidence chains and agent vote details

Supply ChainVerified

7.2/10

Verify email for evidence chains and agent vote details

Quantum ResistanceInferred

9/10

Verify email for evidence chains and agent vote details

▸Compliance Guidance

HIPAA

Suitable for ePHI in transit. Prioritize deployment on systems handling laboratory results, imaging, and patient communications — highest harvest-now risk under HIPAA. (partial alignment — verify with compliance team before production deployment)

PCI DSS 4.0.1

Aligns with PCI DSS 4.0.1 post-quantum requirements (2030 deadline). Strong candidate for card-present transaction encryption and cardholder data environments. (partial alignment — verify with compliance team before production deployment)

CNSA 2.0

Meets NSA CNSA 2.0 requirements for national security systems (2030-2033 mandate). Qualified for defense contractor and federal agency deployments.

FIPS 203/204/205

NIST-standardized. Fulfills FIPS compliance requirements for federal systems and regulated financial/healthcare environments.

QSolve builds your path to January 1, 2029 readiness.

Qtonic Quantum QSolve advisors work alongside your CISO, board, and compliance teams — selecting the right vendor from this registry, managing the competitive evaluation, and requiring quarterly PQC training through your 2029 readiness date.

Request an assessment →

Score History

Standards Compliance

FIPS 203 (ML-KEM)

NIST — Pass

FIPS 204 (ML-DSA)

NIST — Pass

FIPS 205 (SLH-DSA)

NIST — Pass

CNSA 2.0

NSA — Pass

NSM-10

White House — Partial

EO 14028

White House — Partial

PCI DSS 4.0.1

PCI SSC — Partial

HIPAA

HHS — Partial

GDPR

EU — N/A

POPIA

South Africa — N/A

PDPA

Singapore — N/A

LGPD

Brazil — N/A

Highlights

+liboqs provides C implementations of all NIST-standardized algorithms—ML-KEM-512, ML-KEM-768, ML-KEM-1024, ML-DSA-44, ML-DSA-65, ML-DSA-87, and SLH-DSA—and Round 4 candidate algorithms including BIKE,
+The solution reports standards compliance passes for fips203, fips204, fips205, and cnsa2.
+The repository contains a README, CHANGELOG, Security policy, docs/ directory, examples/ directory, and API documentation.
+The open-source library is released under the MIT license and has accumulated 2888 GitHub stars.
+Implemented algorithms span NIST Levels 1, 3, and 5.

Concerns

-The metadata explicitly lists FIPS 140 Certified as "No", indicating no FIPS 140 validation.
-Standards compliance is only partial for nsm10, eo14028, pciDss4, and hipaa.
-The category is listed as "kem" yet the algorithms list includes signature schemes (ML-DSA-44, ML-DSA-65, ML-DSA-87, SLH-DSA), suggesting a metadata classification inconsistency.

Last evaluated: May 24, 2026

Status: active

Published with audit trail

Want this analysis for liboqs?

Start with QScout Free for a verified website snapshot, then scope Surface, Silver, or Gold when approved evidence is needed for inventory, roadmap, and remediation decisions.

Start QScout Free

Related Solutions

AWS-LC

Amazon Web Services

KEMEvidenceFIPS

ML-KEM-768ML-KEM-1024ML-DSA-65+1

AWS-LC is Amazon general-purpose cryptographic library, forked from BoringSSL, with production PQC support. It is FIPS 140-3 validated and powers PQC across all AWS services including KMS, S3, and CloudFront, handling billions of hybrid TLS handshakes daily.

Last evaluated: May 23, 2026

CIRCL

Cloudflare

ML-KEM-512ML-KEM-768ML-KEM-1024+4

CIRCL (Cloudflare Interoperable Reusable Cryptographic Library) is Cloudflare Go-based cryptographic library with production PQC support. It powers post-quantum TLS on Cloudflare edge network, one of the largest PQC deployments in the world, handling billions of hybrid key exchanges daily.

Last evaluated: May 24, 2026

Bouncy Castle PQC

Legion of the Bouncy Castle

KEMEvidenceFIPS

ML-KEM-512ML-KEM-768ML-KEM-1024+10

Bouncy Castle is the dominant cryptographic library for Java and C# ecosystems, with over two decades of production use. Its PQC module provides comprehensive coverage of all NIST-standardized algorithms plus candidates, with full X.509, CMS, and TLS integration for enterprise deployments.

Last evaluated: May 23, 2026

Your vendors are not on this list?

We evaluate any PQC solution on request. Submit a vendor and we will add it to the Qtonic Quantum Lab registry within 48 hours.

Request an Evaluation