NEXUS-Q builds a post-quantum security engine that refuses to invent its own cryptography

Designing Rust APIs around KEM, AEAD and key derivation workflows

NEXUS-Q is a Rust-based post-quantum security engine for encrypting data, managing key lifecycles, and issuing signed identities. It wraps standardized primitives — ML-KEM-768/1024 hybridized with X25519, AES-256-GCM, ChaCha20-Poly1305, Ed25519, ML-DSA-65, SLH-DSA — behind an encrypted vault, deny-by-default policy engine, and HMAC-authenticated audit log. The native ML-KEM/ML-DSA backend is opt-in and experimental; RustCrypto remains the default. No external audit or FIPS validation is claimed.