Qtonic Quantum Lab scores are generated through automated evaluation using publicly available evidence. Scores reflect conditions at the time of evaluation and may change as solutions evolve. Vendors may request a retest at any time. See our fidelity guarantee for full details.

Inherited Cloud Certifications

Qtonic Quantum operates on provider-certified cloud infrastructure and documents inherited controls in the Trust Center.

SOC 1SOC 2SOC 2 HIPAAISO 27001ISO 27017ISO 27018ISO 27701ISO 22301ISO 9001

View all certifications in Trust Center →

Labs/liboqs/Walkthrough

liboqs — Scored Walkthrough

This walkthrough demonstrates how Qtonic Quantum Lab evaluates a PQC solution across all 10 scoring dimensions. Every score below maps to a specific tier in our published rubric, and every evidence point links to a public source you can independently verify.

Composite Score

91/100

Tier

Certified

Algorithm Correctness

Rubric tier: 9 — Exemplary9/10

Evidence

✓liboqs CI runs all NIST Known Answer Test (KAT) vectors on every commit
✓Cross-implementation testing against PQClean and Botan reference implementations
✓Edge case testing documented in test/ directory (zero-length, max-size parameters)
✓ACVP test vector support added in v0.9.0+

Verify

liboqs CI (GitHub Actions)NIST KAT Vectors

Performance

Rubric tier: 7 — Strong8/10

Evidence

✓Benchmarks across x86-64 (AVX2) and ARM (NEON) published in docs/algorithms/
✓speed_kem and speed_sig benchmark tools included in the repository
✓Hardware-accelerated paths for AVX2 and NEON documented and benchmarked
✓Memory profiling via address sanitizer in CI; no unexpected allocations reported

Verify

liboqs Benchmarks Algorithm datasheets

Key & Ciphertext Size

Rubric tier: 9 — Exemplary9/10

Evidence

✓All parameter sets for ML-KEM (512, 768, 1024) implemented with correct sizes per FIPS 203
✓All parameter sets for ML-DSA (44, 65, 87) with correct sizes per FIPS 204
✓SLH-DSA parameter sets with all 12 SHA-2 and SHAKE variants per FIPS 205
✓Size documentation in algorithm datasheets matches NIST specifications exactly

Verify

FIPS 203 (ML-KEM)FIPS 204 (ML-DSA)

Side-Channel Resistance

Rubric tier: 7 — Strong8/10

Evidence

✓Constant-time implementation verified with ct-verif for core operations
✓Valgrind memcheck used in CI to detect timing-dependent branches
✓Known timing leaks documented in SECURITY.md with mitigation status
✓Reference implementations favor constant-time over performance where applicable

Verify

liboqs SECURITY.md ct-verif

Interoperability

Rubric tier: 9 — Exemplary9/10

Evidence

✓OQS OpenSSL provider enables drop-in PQC for any OpenSSL 3.x application
✓oqs-provider registered as an OpenSSL provider; used by curl, nginx, Apache
✓Interop tested with BoringSSL, wolfSSL, and Bouncy Castle implementations
✓IETF hybrid key exchange drafts supported via oqs-provider

Verify

OQS OpenSSL Provider OQS Applications

Standards Compliance

Rubric tier: 7 — Strong8/10

Evidence

✓Implements all three NIST-finalized standards: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA)
✓CNSA 2.0 compliant algorithm selection (ML-KEM-1024, ML-DSA-87)
✓Not FIPS 140-2/3 validated — liboqs is a reference library, not a certified module
✓Used as the PQC backend by FIPS-validated products (e.g., AWS-LC references OQS test vectors)

Verify

CMVP Validated Modules CNSA 2.0

Maturity

Rubric tier: 9 — Exemplary9/10

Evidence

✓Active development since 2016; 10+ major releases
✓Used by AWS, IBM, Microsoft, Cloudflare, and Google in PQC integration efforts
✓600+ GitHub stars, 200+ forks, 50+ contributors
✓Regular release cadence aligned with NIST standardization milestones

Verify

liboqs GitHub OQS Project

Documentation

Rubric tier: 9 — Exemplary9/10

Evidence

✓Per-algorithm datasheets with parameter tables, security levels, and known limitations
✓API reference generated from Doxygen comments
✓CONTRIBUTING.md, SECURITY.md, and PLATFORMS.md maintained
✓Build instructions for 6+ platforms (Linux, macOS, Windows, FreeBSD, ARM, RISC-V)

Verify

liboqs Documentation

Supply Chain

Rubric tier: 7 — Strong8/10

Evidence

✓MIT license — permissive, no patent encumbrance
✓GitHub Actions CI with reproducible builds
✓Signed releases on GitHub (GPG-signed tags)
✓No SBOM published (CycloneDX or SPDX); dependency tree is minimal (cmake, C standard library)

Verify

liboqs Releases liboqs License

Quantum Resistance

Rubric tier: 9 — Exemplary9/10

Evidence

✓All NIST security levels supported (1, 3, 5) — corresponding to 128, 192, 256-bit post-quantum security
✓Implements lattice-based (ML-KEM, ML-DSA), hash-based (SLH-DSA), and code-based (Classic McEliece, HQC, BIKE) schemes
✓Multiple mathematical assumptions reduce single-point-of-failure risk
✓Round 4 candidates (BIKE, Classic McEliece, HQC) available for defense-in-depth

Verify

NIST PQC Project

How to Read This Walkthrough

Score — The per-dimension score (0-10) produced by our published scoring methodology.
Rubric Tier — Maps to the published tier in our scoring rubric. Each tier has quantitative criteria.
Evidence — Specific, publicly verifiable facts that determined the score. No proprietary data.
Verify Links — Direct links to public sources. Every claim can be independently confirmed.

View liboqs Solution Page →View Full Methodology →

Labs/liboqs/Walkthrough

liboqs — Scored Walkthrough

Composite Score

91/100

Tier

Certified

Algorithm Correctness

Rubric tier: 9 — Exemplary9/10

Evidence

✓liboqs CI runs all NIST Known Answer Test (KAT) vectors on every commit
✓Cross-implementation testing against PQClean and Botan reference implementations
✓Edge case testing documented in test/ directory (zero-length, max-size parameters)
✓ACVP test vector support added in v0.9.0+

Verify

liboqs CI (GitHub Actions)NIST KAT Vectors

Performance

Rubric tier: 7 — Strong8/10

Evidence

✓Benchmarks across x86-64 (AVX2) and ARM (NEON) published in docs/algorithms/
✓speed_kem and speed_sig benchmark tools included in the repository
✓Hardware-accelerated paths for AVX2 and NEON documented and benchmarked
✓Memory profiling via address sanitizer in CI; no unexpected allocations reported

Verify

liboqs Benchmarks Algorithm datasheets

Key & Ciphertext Size

Rubric tier: 9 — Exemplary9/10

Evidence

✓All parameter sets for ML-KEM (512, 768, 1024) implemented with correct sizes per FIPS 203
✓All parameter sets for ML-DSA (44, 65, 87) with correct sizes per FIPS 204
✓SLH-DSA parameter sets with all 12 SHA-2 and SHAKE variants per FIPS 205
✓Size documentation in algorithm datasheets matches NIST specifications exactly

Verify

FIPS 203 (ML-KEM)FIPS 204 (ML-DSA)

Side-Channel Resistance

Rubric tier: 7 — Strong8/10

Evidence

✓Constant-time implementation verified with ct-verif for core operations
✓Valgrind memcheck used in CI to detect timing-dependent branches
✓Known timing leaks documented in SECURITY.md with mitigation status
✓Reference implementations favor constant-time over performance where applicable

Verify

liboqs SECURITY.md ct-verif

Interoperability

Rubric tier: 9 — Exemplary9/10

Evidence

✓OQS OpenSSL provider enables drop-in PQC for any OpenSSL 3.x application
✓oqs-provider registered as an OpenSSL provider; used by curl, nginx, Apache
✓Interop tested with BoringSSL, wolfSSL, and Bouncy Castle implementations
✓IETF hybrid key exchange drafts supported via oqs-provider

Verify

OQS OpenSSL Provider OQS Applications

Standards Compliance

Rubric tier: 7 — Strong8/10

Evidence

✓Implements all three NIST-finalized standards: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA)
✓CNSA 2.0 compliant algorithm selection (ML-KEM-1024, ML-DSA-87)
✓Not FIPS 140-2/3 validated — liboqs is a reference library, not a certified module
✓Used as the PQC backend by FIPS-validated products (e.g., AWS-LC references OQS test vectors)

Verify

CMVP Validated Modules CNSA 2.0

Maturity

Rubric tier: 9 — Exemplary9/10

Evidence

✓Active development since 2016; 10+ major releases
✓Used by AWS, IBM, Microsoft, Cloudflare, and Google in PQC integration efforts
✓600+ GitHub stars, 200+ forks, 50+ contributors
✓Regular release cadence aligned with NIST standardization milestones

Verify

liboqs GitHub OQS Project

Documentation

Rubric tier: 9 — Exemplary9/10

Evidence

✓Per-algorithm datasheets with parameter tables, security levels, and known limitations
✓API reference generated from Doxygen comments
✓CONTRIBUTING.md, SECURITY.md, and PLATFORMS.md maintained
✓Build instructions for 6+ platforms (Linux, macOS, Windows, FreeBSD, ARM, RISC-V)

Verify

liboqs Documentation

Supply Chain

Rubric tier: 7 — Strong8/10

Evidence

✓MIT license — permissive, no patent encumbrance
✓GitHub Actions CI with reproducible builds
✓Signed releases on GitHub (GPG-signed tags)
✓No SBOM published (CycloneDX or SPDX); dependency tree is minimal (cmake, C standard library)

Verify

liboqs Releases liboqs License

Quantum Resistance

Rubric tier: 9 — Exemplary9/10

Evidence

✓All NIST security levels supported (1, 3, 5) — corresponding to 128, 192, 256-bit post-quantum security
✓Implements lattice-based (ML-KEM, ML-DSA), hash-based (SLH-DSA), and code-based (Classic McEliece, HQC, BIKE) schemes
✓Multiple mathematical assumptions reduce single-point-of-failure risk
✓Round 4 candidates (BIKE, Classic McEliece, HQC) available for defense-in-depth

Verify

NIST PQC Project

How to Read This Walkthrough

Score — The per-dimension score (0-10) produced by our published scoring methodology.
Rubric Tier — Maps to the published tier in our scoring rubric. Each tier has quantitative criteria.
Evidence — Specific, publicly verifiable facts that determined the score. No proprietary data.
Verify Links — Direct links to public sources. Every claim can be independently confirmed.

View liboqs Solution Page →View Full Methodology →