pqtransport logopqtransport

Cookbook

Common pqtransport patterns for Dart application code.

In-memory TLS#

final crypto = PqTransportCrypto();
final identity = PqTlsServerIdentity.generate(crypto);
final (a, b) = MemoryByteSocket.pair();
final client = PqTlsSocket.client(a, crypto: crypto);
final server = PqTlsSocket.server(b, crypto: crypto, identity: identity);
await Future.wait([server.handshake(), client.handshake()]);

HTTP/1.1 GET over that socket#

final http = PqHttpClient(socket: client);
final res = await http.roundTripH1(PqHttpRequest.get('/health'));

Length-filter a share#

final share = requireLength(raw, x25519MlKem768ClientShareBytes);
final parsed = decodeClientShare(HybridGroup.x25519MlKem768, share);

DNS with breaker and cache#

final client = PqDnsClient(
  exchange: memoryExchange,
  cache: Cache<String, DnsMessage>(ttl: const Duration(seconds: 30)),
);
final answer = await client.lookup('example.test', DnsType.a);

Signed mDNS TXT#

final txt = signTxt(crypto, identity, 'pqtransport=1');
final ok = verifyTxt(crypto, identity.publicKey, txt);

Live NIST group#

final crypto = PqTransportCrypto();
final r = PqTlsClient(
  crypto: crypto,
  group: HybridGroup.secP256r1MlKem768,
).startHandshake();
// Live via pqforge 0.4.4. SecP384r1MLKEM1024 needs PqForgeProfile.maximum.

Profile / group mismatch still fails closed# 

final crypto = PqTransportCrypto(profile: PqForgeProfile.maximum);
final r = await PqTlsClient(
  crypto: crypto,
  group: HybridGroup.x25519MlKem768,
).startHandshake();
// Result.failure — maximum is ML-KEM-1024; X25519MLKEM768 needs 768.