Quantum Protection Overview

ByteHide Storage implements post-quantum cryptography (PQC) to protect your data against both classical and quantum computer attacks.

Zero-Knowledge Architecture

ByteHide Storage is designed with a zero-knowledge architecture, meaning:

1. Key Management: While ByteHide Storage manages the PQC key infrastructure automatically, the master encryption phrase remains exclusively under your control.
2. Data Privacy: ByteHide cannot decrypt your files - only you have access through your master phrase.
3. Security Model: Even if ByteHide's infrastructure were compromised, your data remains secure.

What is Post-Quantum Cryptography?

Post-quantum cryptography refers to cryptographic algorithms that are believed to be secure against attacks by both classical and quantum computers. As quantum computers evolve, they pose a significant threat to traditional encryption methods. ByteHide's quantum protection ensures your data remains secure even in a post-quantum world.

Available Algorithms

ByteHide Storage supports multiple quantum-resistant algorithms:

Kyber Family

• Kyber512 - Balanced performance
• Kyber768 - Enhanced security
• Kyber1024 - Maximum security (Default)

MLKEM Family

• MLKEM512 - Alternative balanced option
• MLKEM768 - Alternative enhanced security
• MLKEM1024 - Alternative maximum security

Additional Options

• Sntrup761 - NIST finalist
• FrodoKem1344Shake - Conservative choice

Using Quantum Protection

Enable quantum protection in your storage operations:

// Initialize with default (Kyber1024) and master phrase
var secrets = new SecretsManager("<secrets_token>");
string masterPhrase = await secrets.Get("storage_master_phrase");

var storage = new StorageManager("<token>", masterPhrase);

// Specify algorithm with secure phrase management
var storage = new StorageManager(
    "<token>", 
    masterPhrase,
    quantumAlgorithm: QuantumAlgorithmType.Kyber1024
);

// Enable quantum encryption for operations
await storage
    .EncryptWithQuantum()
    .Set("secure/data.dat", sensitiveData);

Algorithm Selection Guide

Choose your algorithm based on your security needs:

Performance Considerations

Algorithm performance comparison:

// Faster, good security
var fastStorage = new StorageManager(
    quantumAlgorithm: QuantumAlgorithmType.Kyber512
);

// Maximum security, slightly slower
var secureStorage = new StorageManager(
    quantumAlgorithm: QuantumAlgorithmType.Kyber1024
);

Best Practices

1. Key Management

   • Use ByteHide Secrets for master phrase storage
   • Implement proper key rotation procedures
   • Keep backup of master phrases in a secure location
   • Use different phrases for different environments

2. Algorithm Selection

   • Use Kyber1024 for critical data
   • Consider Kyber512 for frequent operations
   • Use FrodoKem for maximum security margin

3. Implementation

   • Enable quantum protection for sensitive data
   • Combine with standard encryption for layers of security
   • Document your algorithm choices

4. Security Architecture

   • Understand the zero-knowledge design
   • Plan for key recovery scenarios
   • Document your security architecture
   • Regular security audits