← Home
The Engineering Underneath
Signing, verification, and encryption are the primitives everything we build runs on. We wrote our own, and they are among the fastest in production.
AES-GCM Optimization
≈6.8 GB/s (53.2 Gbps)
Single-core encryption throughput on ARM. Fast enough that protecting a data path — including model and training traffic — stops being a performance trade-off.
- ARM Neon SIMD optimization
- Hardware-accelerated where available
- Constant-time implementation
ML-KEM (Kyber)
0.052 ms
NIST-standardized key encapsulation. The key exchange behind long-lived secrets that still have to be secret in ten years.
- Significantly faster than reference
- All security levels (512, 768, 1024)
- Side-channel resistant design
ML-DSA (Dilithium)
0.206 ms / 0.067 ms
Digital signatures for authenticity and integrity — the same primitive that lets you prove a model artifact is the one you approved.
- Optimized signing + verification
- Deterministic and reproducible builds
- Constant-time implementation
Proof, Not Promises
Every engagement ends with something you can check yourself — running code, measured numbers, and the evidence behind both.
What We Ship
- Working software, with tests and handover documentation
- Signed, reproducible builds you can verify independently
- Findings written to be actioned, not filed
Measured Performance
- AES-256-GCM: ≈6.8 GB/s (53.2 Gbps) single-core on ARM
- ML-KEM-768: 0.0238 ms encap / 0.0282 ms decap (≈0.052 ms roundtrip)
- ML-DSA-65: 0.206 ms sign / 0.067 ms verify
Standards We Follow
- NIST FIPS 203/204 algorithm support
- FIPS 140-3 readiness artifacts
- Crypto-agility for future migrations