{"id":"gen-1785059096-zsqh059w7mF5yrjcaKQq","choices":[{"finish_reason":"stop","index":0,"logprobs":null,"message":{"content":"## ELI5: PQC\n\nToday’s secure messaging usually starts with math puzzles like RSA or elliptic curves. Normal computers find those puzzles hard, but a big enough quantum computer could solve some of them quickly and break the encryption.\n\n**Post-Quantum Cryptography (PQC)** is a new generation of locks based on different math—mostly lattices and hash-based constructions—that we currently believe is hard even for quantum computers.\n\nNIST has standardized:\n- **ML-KEM** formerly Kyber: post-quantum key exchange.\n- **ML-DSA** formerly Dilithium: post-quantum signatures.\n- **AES-256** is still considered okay because quantum attacks only roughly halve its security.\n\nThe script below does a simple E2E demo:\n\n1. Bob publishes an ML-KEM public key.\n2. Alice uses it to create a shared secret plus a ciphertext.\n3. Bob decapsulates the ciphertext to recover the same secret.\n4. Both derive AES-256-GCM keys with HKDF.\n5. Alice sends an encrypted, signed message.\n6. Bob verifies, decrypts, and sends back an encrypted, signed reply.\n\nSave as `pqc_e2e.ts` and run:\n\n```bash\ndeno run --allow-net pqc_e2e.ts\n```\n\n```typescript\n// pqc_e2e.ts\n// Run: deno run --allow-net pqc_e2e.ts\n// Uses @noble/post-quantum because Deno/WebCrypto do not yet include ML-KEM/ML-DSA natively.\n\nimport { ml_kem768, ml_dsa65 } from \"npm:@noble/post-quantum@0.2.0\";\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\nconst ORIGIN = \"http://127.0.0.1:8787\";\n\ntype PublicBundle = {\n kemPublicKeyB64: string;\n signingPublicKeyB64: string;\n};\n\ntype Envelope = {\n kemCiphertextB64: string;\n ivB64: string;\n ciphertextB64: string;\n signatureB64: string;\n signingPublicKeyB64: string;\n};\n\ntype Reply = {\n ivB64: string;\n ciphertextB64: string;\n signatureB64: string;\n};\n\ntype ReceiveResponse = {\n ok: boolean;\n reply?: Reply;\n error?: string;\n};\n\nfunction b64u(bytes: Uint8Array): string {\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin);\n}\n\nfunction unb64u(s: string): Uint8Array {\n const bin = atob(s);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction concat(...parts: Uint8Array[]): Uint8Array {\n const len = parts.reduce((n, p) => n + p.length, 0);\n const out = new Uint8Array(len);\n let off = 0;\n for (const p of parts) {\n out.set(p, off);\n off += p.length;\n }\n return out;\n}\n\nfunction equal(a: Uint8Array, b: Uint8Array): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n return diff === 0;\n}\n\nasync function deriveKey(\n secret: Uint8Array,\n salt: Uint8Array,\n label: string\n): Promise {\n const baseKey = await crypto.subtle.importKey(\n \"raw\",\n secret,\n \"HKDF\",\n false,\n [\"deriveKey\"]\n );\n\n return crypto.subtle.deriveKey(\n { name: \"HKDF\", hash: \"SHA-256\", salt, info: enc.encode(label) },\n baseKey,\n { name: \"AES-GCM\", length: 256 },\n false,\n [\"encrypt\", \"decrypt\"]\n );\n}\n\nasync function aesEncrypt(key: CryptoKey, plaintext: Uint8Array) {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ciphertext = new Uint8Array(\n await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, key, plaintext)\n );\n return { iv, ciphertext };\n}\n\nasync function aesDecrypt(\n key: CryptoKey,\n iv: Uint8Array,\n ciphertext: Uint8Array\n): Promise {\n return new Uint8Array(\n await crypto.subtle.decrypt({ name: \"AES-GCM\", iv }, key, ciphertext)\n );\n}\n\n// Bob's long-term PQC keys.\nconst bobKem = ml_kem768.keypair();\nconst bobSigning = ml_dsa65.keypair();\n\n// Alice's signing key. Bob \"pins\" Alice's public signing key out-of-band for this demo.\nconst aliceSigning = ml_dsa65.keypair();\nconst TRUSTED_ALICE_SIGNING_PUBLIC_KEY = aliceSigning.publicKey;\n\nlet resolveReady: () => void;\nconst ready = new Promise((resolve) => (resolveReady = resolve));\n\nasync function handle(req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/pubkey\") {\n const pub: PublicBundle = {\n kemPublicKeyB64: b64u(bobKem.publicKey),\n signingPublicKeyB64: b64u(bobSigning.publicKey),\n };\n return Response.json(pub);\n }\n\n if (req.method === \"POST\" && url.pathname === \"/receive\") {\n try {\n const env = (await req.json()) as Envelope;\n\n const kemCiphertext = unb64u(env.kemCiphertextB64);\n const iv = unb64u(env.ivB64);\n const ciphertext = unb64u(env.ciphertextB64);\n const signature = unb64u(env.signatureB64);\n const senderSignPub = unb64u(env.signingPublicKeyB64);\n\n if (!equal(senderSignPub, TRUSTED_ALICE_SIGNING_PUBLIC_KEY)) {\n throw new Error(\"unknown sender signing key\");\n }\n\n const signed = concat(enc.encode(\"a2b\"), kemCiphertext, iv, ciphertext);\n if (!ml_dsa65.verify(TRUSTED_ALICE_SIGNING_PUBLIC_KEY, signed, signature)) {\n throw new Error(\"bad Alice signature\");\n }\n\n // Bob recovers the same shared secret using his ML-KEM private key.\n const sharedSecret = ml_kem768.decapsulate(bobKem.secretKey, kemCiphertext);\n\n const a2bKey = await deriveKey(\n sharedSecret,\n kemCiphertext,\n \"demo e2e v1 alice->bob\"\n );\n\n const plaintext = await aesDecrypt(a2bKey, iv, ciphertext);\n console.log(\"Bob received:\", dec.decode(plaintext));\n\n // Bob replies using a different derived key for the reverse direction.\n const b2aKey = await deriveKey(\n sharedSecret,\n kemCiphertext,\n \"demo e2e v1 bob->alice\"\n );\n\n const replyText = enc.encode(`Bob ack: ${dec.decode(plaintext)}`);\n const { iv: rIv, ciphertext: rCiphertext } = await aesEncrypt(\n b2aKey,\n replyText\n );\n\n const replySigned = concat(enc.encode(\"b2a\"), rIv, rCiphertext);\n const replySig = ml_dsa65.sign(bobSigning.secretKey, replySigned);\n\n const reply: Reply = {\n ivB64: b64u(rIv),\n ciphertextB64: b64u(rCiphertext),\n signatureB64: b64u(replySig),\n };\n\n return Response.json({ ok: true, reply });\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n return Response.json({ ok: false, error: message }, { status: 400 });\n }\n }\n\n return new Response(\"not found\", { status: 404 });\n}\n\nconst server = Deno.serve(\n { hostname: \"127.0.0.1\", port: 8787, onListen: () => resolveReady() },\n handle\n);\n\nawait ready;\n\nasync function aliceSession() {\n const pubRes = await fetch(`${ORIGIN}/pubkey`);\n if (!pubRes.ok) throw new Error(`pubkey fetch failed: ${pubRes.status}`);\n\n const pub = (await pubRes.json()) as PublicBundle;\n const bobKemPub = unb64u(pub.kemPublicKeyB64);\n const bobSigningPub = unb64u(pub.signingPublicKeyB64);\n\n // Demo pinning: in a real client, compare to a known/certified key, not the server's own variable.\n if (!equal(bobKemPub, bobKem.publicKey) || !equal(bobSigningPub, bobSigning.publicKey)) {\n throw new Error(\"Bob public key did not match pinned key\");\n }\n\n // Alice creates a post-quantum shared secret for Bob.\n const { ciphertext: kemCiphertext, sharedSecret } =\n ml_kem768.encapsulate(bobKemPub);\n\n const a2bKey = await deriveKey(\n sharedSecret,\n kemCiphertext,\n \"demo e2e v1 alice->bob\"\n );\n\n const plaintext = enc.encode(\"hello from Alice over PQC E2E\");\n const { iv, ciphertext } = await aesEncrypt(a2bKey, plaintext);\n\n const signed = concat(enc.encode(\"a2b\"), kemCiphertext, iv, ciphertext);\n const signature = ml_dsa65.sign(aliceSigning.secretKey, signed);\n\n const envelope: Envelope = {\n kemCiphertextB64: b64u(kemCiphertext),\n ivB64: b64u(iv),\n ciphertextB64: b64u(ciphertext),\n signatureB64: b64u(signature),\n signingPublicKeyB64: b64u(aliceSigning.publicKey),\n };\n\n const res = await fetch(`${ORIGIN}/receive`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(envelope),\n });\n\n const body = (await res.json()) as ReceiveResponse;\n if (!body.ok || !body.reply) {\n throw new Error(`receive failed: ${body.error ?? res.status}`);\n }\n\n const reply = body.reply;\n const rIv = unb64u(reply.ivB64);\n const rCiphertext = unb64u(reply.ciphertextB64);\n const rSig = unb64u(reply.signatureB64);\n\n const replySigned = concat(enc.encode(\"b2a\"), rIv, rCiphertext);\n if (!ml_dsa65.verify(bobSigningPub, replySigned, rSig)) {\n throw new Error(\"bad Bob signature\");\n }\n\n const b2aKey = await deriveKey(\n sharedSecret,\n kemCiphertext,\n \"demo e2e v1 bob->alice\"\n );\n\n const replyPlaintext = await aesDecrypt(b2aKey, rIv, rCiphertext);\n console.log(\"Alice received:\", dec.decode(replyPlaintext));\n}\n\ntry {\n await aliceSession();\n} finally {\n await server.shutdown();\n}\n```\n\nExpected output:\n\n```text\nBob received: hello from Alice over PQC E2E\nAlice received: Bob ack: hello from Alice over PQC E2E\n```\n\nProduction caveats: pin public keys out-of-band, add replay/sequence protection, use hybrid key exchange like classical plus ML-KEM during the transition, and don’t use this demo as-is for sensitive traffic.","refusal":null,"role":"assistant","annotations":null,"audio":null,"function_call":null,"tool_calls":null,"reasoning":"We need answer: user asks \"eli5 PQC and provide a concrete Deno script that sends & receives E2E comms\". Need explain PQC ELI5 and provide concrete Deno script that sends & receives E2E comms. Need likely include full HTML? Wait system says \"The user wants to render your response in an iframe that will render the response in a web browser. If you use any external libraries, your answer should include the full HTML in same code block. This includes any

PQC E2E Comms Test