OQS-Provider — Qtonic Quantum Score 79.9/100 | Qtonic Quantum Lab

Back to Registry

API CheckingRegistry CheckingTrust Checking

OQS-Provider

Qtonic Quantum Evaluated

Open Quantum Safe

ProtocolCNSA 2.0

Evidence source: Live API

79.9

Rank unavailable

Score Radar

Overview

OQS-Provider is an OpenSSL 3.x provider that adds PQC algorithm support via liboqs. It is the recommended path for adding post-quantum cryptography to any application using OpenSSL 3.x, enabling PQC TLS, X.509, and CMS without modifying application code.

Algorithms

ML-KEM-512ML-KEM-768ML-KEM-1024ML-DSA-44ML-DSA-65ML-DSA-87SLH-DSAFalcon-512Falcon-1024

Languages

C

NIST Level1, 2, 3, 5

LicenseMIT

RepositorySource

Dimension Breakdown

Algorithm CorrectnessContested

9.2/10

Verify email for evidence chains and agent vote details

PerformanceVerified

7.5/10

Verify email for evidence chains and agent vote details

Key & Ciphertext SizeVerified

8.1/10

Verify email for evidence chains and agent vote details

Side Channel ResistanceContested

6.2/10

Verify email for evidence chains and agent vote details

InteroperabilityVerified

10/10

Verify email for evidence chains and agent vote details

Standards ComplianceVerified

7.5/10

Verify email for evidence chains and agent vote details

MaturityVerified

7.2/10

Verify email for evidence chains and agent vote details

DocumentationVerified

7.5/10

Verify email for evidence chains and agent vote details

Supply ChainContested

6.8/10

Verify email for evidence chains and agent vote details

Quantum ResistanceContested

9.2/10

Verify email for evidence chains and agent vote details

▸Compliance Guidance

HIPAA

Suitable for ePHI in transit. Prioritize deployment on systems handling laboratory results, imaging, and patient communications — highest harvest-now risk under HIPAA. (partial alignment — verify with compliance team before production deployment)

PCI DSS 4.0.1

Aligns with PCI DSS 4.0.1 post-quantum requirements (2030 deadline). Strong candidate for card-present transaction encryption and cardholder data environments. (partial alignment — verify with compliance team before production deployment)

CNSA 2.0

Meets NSA CNSA 2.0 requirements for national security systems (2030-2033 mandate). Qualified for defense contractor and federal agency deployments.

FIPS 203/204/205

NIST-standardized. Fulfills FIPS compliance requirements for federal systems and regulated financial/healthcare environments.

QSolve builds your path to January 1, 2029 readiness.

Qtonic Quantum QSolve advisors work alongside your CISO, board, and compliance teams — selecting the right vendor from this registry, managing the competitive evaluation, and requiring quarterly PQC training through your 2029 readiness date.

Request an assessment →

Score History

Standards Compliance

FIPS 203 (ML-KEM)

NIST — Pass

FIPS 204 (ML-DSA)

NIST — Pass

FIPS 205 (SLH-DSA)

NIST — Pass

CNSA 2.0

NSA — Pass

NSM-10

White House — Partial

EO 14028

White House — Partial

PCI DSS 4.0.1

PCI SSC — Partial

HIPAA

HHS — Partial

GDPR

EU — N/A

POPIA

South Africa — N/A

PDPA

Singapore — N/A

LGPD

Brazil — N/A

Highlights

+OQS-Provider implements ML-KEM-512, ML-KEM-768, ML-KEM-1024, ML-DSA-44, ML-DSA-65, ML-DSA-87, SLH-DSA, Falcon-512, and Falcon-1024, covering NIST Levels 1, 2, 3, and 5.
+As an OpenSSL 3.x provider, it enables PQC TLS, X.509, and CMS without modifying application code.
+Standards compliance is recorded as pass for fips203, fips204, fips205, and cnsa2.
+Documentation artifacts present include a README, CHANGELOG, Security policy, examples/ directory, and API documentation.

Concerns

-FIPS 140 Certified is listed as No.
-Standards compliance is only partial for nsm10, eo14028, pciDss4, and hipaa.

Last evaluated: May 24, 2026

Status: active

Published with audit trail

Want this analysis for OQS-Provider?

Start with QScout Free for a verified website snapshot, then scope Surface, Silver, or Gold when approved evidence is needed for inventory, roadmap, and remediation decisions.

Start QScout Free

Related Solutions

AWS KMS PQ TLS

Amazon Web Services

ProtocolEvidenceFIPS

X25519-ML-KEM-768ML-KEM-768ML-KEM-1024

AWS Key Management Service with PQ TLS provides FIPS 140-3 Level 3 validated post-quantum key exchange for one of the most widely deployed cloud key management services. It offers transparent PQ TLS protection for all KMS API calls via AWS SDK, backed by dedicated HSMs.

Last evaluated: May 23, 2026

Google Tink PQ

Google

ProtocolEvidence

ML-KEM-768X25519-ML-KEM-768HPKE-ML-KEM-768

Google Tink is a multi-language cryptographic library focused on misuse-resistant API design. Its PQC module provides hybrid ML-KEM-768 key exchange and HPKE integration, bringing Google opinionated approach to secure-by-default PQC to Java, Go, C++, and Python developers.

JavaGoC++Python

Last evaluated: May 23, 2026

Cloudflare PQ TLS (CIRCL)

Cloudflare

ProtocolEvidence

X25519-ML-KEM-768ML-KEM-768

Cloudflare PQ TLS implementation is the world largest post-quantum TLS deployment, handling billions of hybrid X25519-ML-KEM-768 handshakes daily across Cloudflare global edge network. It represents the most battle-tested PQC protocol deployment in production.

Last evaluated: May 23, 2026

Your vendors are not on this list?

We evaluate any PQC solution on request. Submit a vendor and we will add it to the Qtonic Quantum Lab registry within 48 hours.

Request an Evaluation