Future—
Proof
Security.
Quantum computers will break the cryptography that secures the modern internet. Kaellabs builds the standards, software, and instrumentation that come next.

The cryptography protecting trillions of dollars in digital assets was designed for a world without quantum machines. That world is ending.
We work with custodians, exchanges, and sovereign issuers to migrate to NIST-standardized post-quantum schemes — without breaking the contracts, wallets, and habits the open economy already runs on.
What we build
Halcyon
Lattice-based signing service with hardware attestation. Drop-in for existing HSM workflows.
Risq Index
Continuous exposure map of wallets, contracts and chains vulnerable to a cryptographically relevant quantum adversary.
Sentry SDK
Hybrid PQ + classical libraries for Rust, Go, and TypeScript with audited bindings.
A decade-long transition, already underway.
- 2024NIST finalizes ML-KEM, ML-DSA, and SLH-DSA as the first federal post-quantum standards.
- 2025Major browsers ship hybrid X25519 + ML-KEM key exchange by default.
- 2026Custodians begin issuing PQ-signed attestations alongside ECDSA for new accounts.
- 2028Federal systems required to publish migration plans. Hybrid signing reaches majority adoption among institutional issuers.
- 2030U.S. federal mandate for full PQ migration. Legacy ECDSA-only systems treated as deprecated.
- 2035Estimated window in which a cryptographically relevant quantum computer becomes plausible.
How we work, in five sentences.
Research over hype.
We publish what we learn. The hardest problems in cryptography are solved in the open, by people willing to be wrong in public.
Hybrid by default.
Through the migration window, every signature carries both a classical and a post-quantum guarantee. Verification succeeds while either remains unbroken.
Boring infrastructure.
Cryptography is the layer underneath. Our job is to make it invisible to the operators who depend on it and unsurprising to the auditors who review it.
Small surface area.
Fewer primitives, audited deeply. Every line of cryptographic code we ship is reviewed by at least two researchers outside the original author's team.
Patient partners only.
We work with a small set of custodians, sovereigns, and foundations who are early enough to do this carefully and patient enough to do it well.
Open standards.
We contribute to IETF, NIST, and the wider research community. The standards that secure the next internet should not belong to any one vendor.
Eighteen months inside an institutional migration.
A top-ten custodian asked us to add post-quantum signing to a stack that handled roughly forty thousand transactions per day, without touching the policy engine or the audit trail their regulators already approved.
We shipped hybrid ML-DSA attestations behind their existing HSM API in eleven weeks. Latency rose by single-digit milliseconds. The operators noticed nothing.
Read the engagement notesThe ones we hear most.
When does a quantum computer actually break ECDSA?+
Nobody knows exactly. Credible expert surveys place a 20–30% probability of a cryptographically relevant machine by 2035. The migration takes longer than that window, which is why work begins now.
Do I need to move every key today?+
No. The priority is anything signing new commitments, anything with reused public keys, and anything that must remain valid past the migration window. The Risq Index is a starting point for the second category.
What happens to Bitcoin in a post-quantum world?+
Bitcoin has well-understood paths to a post-quantum signature scheme via soft fork. The harder question is the social coordination required to move legacy outputs before they can be opportunistically swept.
Is hybrid signing standardized?+
Yes. IETF drafts and CNSA 2.0 guidance both specify hybrid constructions. We ship audited implementations of the leading drafts.
Can we run this air-gapped?+
Yes. The Sentry SDK runs in HSM and air-gapped signer environments. We provide reference integrations for the major platforms.
Begin the migration.
A 30-minute briefing with our research team to map your exposure and the path to a quantum-resistant posture.
Request a briefing