Quantum Aether

Quantum Aether / الأثير الكمومي

Quantum experiments · Digital DNA archive · Post-quantum TLS scanner

English

Three parts in one project:

1. Quantum experiments with Qiskit: Bell and GHZ states, teleportation, a GHZ run on IBM's ibm_marrakesh processor, and a script that measures the real GHZ fidelity.
2. Digital DNA archive: text is encoded into A/C/G/T with Reed-Solomon error correction and restores byte for byte.
3. Post-quantum TLS scanner (web service at ather-quatum.cloud): checks whether a website negotiates the hybrid post-quantum key exchange X25519MLKEM768 and analyzes its certificate. Free summary; $49 full report through PayPal.

العربية

ثلاثة أجزاء في مشروع واحد:

1. تجارب كمومية بـ Qiskit: حالات Bell وGHZ، ونقل الحالة الكمومية، وتشغيل GHZ على معالج IBM الحقيقي ibm_marrakesh، وسكربت لقياس الدقة الفعلية لحالة GHZ.
2. أرشيف DNA رقمي: ترميز النص إلى A/C/G/T مع تصحيح أخطاء Reed-Solomon، ويُسترجع حرفاً بحرف.
3. ماسح جاهزية TLS لما بعد الكم (خدمة ويب على ather-quatum.cloud): يفحص هل يستخدم الموقع تبادل المفاتيح الهجين X25519MLKEM768 ويحلل شهادته. ملخص مجاني وتقرير كامل بـ 49$ عبر PayPal.

Study: post-quantum TLS on the top 1,000 websites (November 2026)

We scanned the Tranco top 1,000 domains on 2026-11-03. Of the 712 that answered on HTTPS, 425 (59.7%) negotiate the hybrid X25519MLKEM768 key exchange; the rest still use classical X25519 or ECDHE only (among them amazon.com, github.com, wikipedia.org, netflix.com and bing.com).

• Results page: https://ather-quatum.cloud/study/top-1000-post-quantum-tls
• Data (CC BY 4.0): data/pq_study_top1000.json, raw per-domain results in data/pq_study_top1000_raw.jsonl
• Reproduce: python tools/run_study.py domains.txt results.jsonl (one domain per line)
• Weekly tracker: https://ather-quatum.cloud/adoption re-scans the Tranco top 10,000 (monthly the top 100,000, adoption_job.py monthly) plus watchlists of government, bank and company sites in Germany, Austria and Switzerland every Monday (adoption_job.py, systemd timer quantum_adoption.timer, lists in data/adoption_watchlists.json). Data: /adoption.json and /adoption.csv (CC BY 4.0). Network names: IP-to-ASN data from iptoasn.com (PDDL). Scan policy and opt-out: https://ather-quatum.cloud/scanning

GitHub Action

Check on every deploy that your site still negotiates post-quantum TLS:

- uses: moncef00327-cloud/pq-tls-action@v1
  with:
    domain: example.com
    require-post-quantum: true

Details: github-action/README.md · GitHub Marketplace

Guides

• Enable X25519MLKEM768 on nginx
• Post-quantum TLS on Apache, Caddy, HAProxy and Cloudflare
• Harvest now, decrypt later: why key exchange comes first

Scan from the command line

pip install cryptography
python quantum_vuln_scanner.py example.com
curl -X POST https://ather-quatum.cloud/api/scan -H "Content-Type: application/json" -d '{"domain":"example.com"}'

Files / الملفات

Run locally / التشغيل المحلي

python -m venv .venv
.venv\Scripts\activate            # Linux/macOS: source .venv/bin/activate
pip install -r requirements.txt -r requirements-quantum.txt
python -m unittest discover -s tests -t .
python quantum_saas_app.py        # http://127.0.0.1:5000

Payments are disabled until PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET are set; the scan itself works without them.

Deploy / النشر

On the server (Ubuntu/Debian, as root), from a copy of this repository:

bash deploy/install.sh           # installs or updates the app, keeps data and settings
bash deploy/configure.sh         # asks for the PayPal secret and admin password (hidden input)

Data lives in /var/lib/quantum_saas, settings in /etc/quantum_saas.env, and the service runs as the unprivileged user quantum behind nginx. install.sh also enables the weekly /adoption scan (quantum_adoption.timer, Mondays 03:30 UTC). To run it right away: systemctl start quantum_adoption.service.

Notes on the science / ملاحظات علمية

• 96.29% is the GHZ population P(000)+P(111), an upper bound on the fidelity. Use ghz_fidelity.py for the fidelity itself.
• The DNA sequence is a digital encoding; nothing was synthesized.
• Shor's algorithm breaks RSA and elliptic-curve keys of any size; larger RSA keys do not provide quantum safety. What protects recorded traffic today is a post-quantum key exchange such as X25519MLKEM768.