Hybrid envelopes
Wrap legacy RSA/ECC-encrypted payloads in ML-KEM envelopes without re-issuing data.
Migration
The re-encryption bridge between legacy crypto and the PQC future.
Re-encryption key bridge for legacy systems migrating to post-quantum cryptography.
In action
The qREK entropy daemon fetches quantum-random bytes from QSE’s Entropy API over TLS and writes them into the Linux kernel’s random pool, so keys generated on that host draw on quantum entropy. Pick a mode and watch it run.
Daemon log
strace -e write · what the kernel sees
Turn on JavaScript to watch the simulation. In inject-loop mode the daemon fetches 256 quantum-random bytes per batch from the QSE Entropy API and writes each batch into /dev/random.
Quantum-random bytes arrive from the QSE Entropy API over TLS, 256 at a time.
Optionally combined with local randomness, with a SHA-256 fingerprint of each batch logged for audit.
Each batch is written into the kernel’s random pool through /dev/random, as the strace pane shows.
Simulation based on a recorded session. Host names, addresses and the API endpoint are placeholders.
Talk to the qREK teamCapabilities
Wrap legacy RSA/ECC-encrypted payloads in ML-KEM envelopes without re-issuing data.
Translate between cryptographic regimes at the edge — no plaintext exposure.
Per-tenant, per-jurisdiction key handling and rotation policies enforced in hardware.
Live dashboards of remaining classical-crypto exposure across the estate.
Outcomes
Specifications
Get started
Talk to the product team about deploying qREK in your environment.