Quantum Aether
Check a website's post-quantum TLS readiness (ML-KEM key exchange, certificate, grade)
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
quantum-aether-mcpclaude mcp add quantum-aether -- uvx quantum-aether-mcp==1.0.1
{
"mcpServers": {
"quantum-aether": {
"command": "uvx",
"args": [
"quantum-aether-mcp==1.0.1"
]
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Sommaire
- Quantum Aether / الأثير الكمومي
- Quantum experiments · Digital DNA archive · Post-quantum TLS scanner
- Study: post-quantum TLS on the top 1,000 websites (November 2026)
- GitHub Action
- Guides
- Scan from the command line
- Files / الملفات
- Run locally / التشغيل المحلي
- Deploy / النشر
- Notes on the science / ملاحظات علمية
Quantum Aether / الأثير الكمومي
Quantum experiments · Digital DNA archive · Post-quantum TLS scanner
English
Three parts in one project:
- Quantum experiments with Qiskit: Bell and GHZ states, teleportation, a GHZ run on IBM's ibm_marrakesh processor, and a script that measures the real GHZ fidelity.
- Digital DNA archive: text is encoded into A/C/G/T with Reed-Solomon error correction and restores byte for byte.
- Post-quantum TLS scanner (web service at ather-quatum.cloud): checks whether a website negotiates the hybrid post-quantum key exchange X25519MLKEM768 and analyzes its certificate. Free summary; $49 full report through PayPal.
العربية
ثلاثة أجزاء في مشروع واحد:
- تجارب كمومية بـ Qiskit: حالات Bell وGHZ، ونقل الحالة الكمومية، وتشغيل GHZ على معالج IBM الحقيقي ibm_marrakesh، وسكربت لقياس الدقة الفعلية لحالة GHZ.
- أرشيف DNA رقمي: ترميز النص إلى A/C/G/T مع تصحيح أخطاء Reed-Solomon، ويُسترجع حرفاً بحرف.
- ماسح جاهزية TLS لما بعد الكم (خدمة ويب على ather-quatum.cloud): يفحص هل يستخدم الموقع تبادل المفاتيح الهجين X25519MLKEM768 ويحلل شهادته. ملخص مجاني وتقرير كامل بـ 49$ عبر PayPal.
Study: post-quantum TLS on the top 1,000 websites (November 2026)
We scanned the Tranco top 1,000 domains on 2026-11-03. Of the 712 that answered on HTTPS, 425 (59.7%) negotiate the hybrid X25519MLKEM768 key exchange; the rest still use classical X25519 or ECDHE only (among them amazon.com, github.com, wikipedia.org, netflix.com and bing.com).
- Results page: https://ather-quatum.cloud/study/top-1000-post-quantum-tls
- Data (CC BY 4.0):
data/pq_study_top1000.json, raw per-domain results indata/pq_study_top1000_raw.jsonl - Reproduce:
python tools/run_study.py domains.txt results.jsonl(one domain per line) - Weekly tracker: https://ather-quatum.cloud/adoption re-scans the Tranco top 10,000 (monthly the top 100,000,
adoption_job.py monthly) plus watchlists of government, bank and company sites in Germany, Austria and Switzerland every Monday (adoption_job.py, systemd timerquantum_adoption.timer, lists indata/adoption_watchlists.json). Data:/adoption.jsonand/adoption.csv(CC BY 4.0). Network names: IP-to-ASN data from iptoasn.com (PDDL). Scan policy and opt-out: https://ather-quatum.cloud/scanning
GitHub Action
Check on every deploy that your site still negotiates post-quantum TLS:
- uses: moncef00327-cloud/pq-tls-action@v1
with:
domain: example.com
require-post-quantum: true
Details: github-action/README.md · GitHub Marketplace
Guides
- Enable X25519MLKEM768 on nginx
- Post-quantum TLS on Apache, Caddy, HAProxy and Cloudflare
- Harvest now, decrypt later: why key exchange comes first
Scan from the command line
pip install cryptography
python quantum_vuln_scanner.py example.com
curl -X POST https://ather-quatum.cloud/api/scan -H "Content-Type: application/json" -d '{"domain":"example.com"}'
Files / الملفات
| File | Purpose |
|---|---|
quantum_saas_app.py | Flask web app: scan pages, free API, PayPal checkout, paid report, admin |
quantum_vuln_scanner.py | The scanner (also a CLI: python quantum_vuln_scanner.py example.com) |
paypal_client.py, sales_db.py, i18n.py | PayPal Orders v2 client, SQLite storage, Arabic/English texts |
templates/, static/ | Web pages, styles, PayPal button script |
guides.py | Guide pages (Arabic/English) |
data/, tools/run_study.py | Top-1,000 study data and the script that produced it |
real_quantum.py | Run GHZ on IBM hardware, or --fetch JOB_ID to download an existing job |
ghz_fidelity.py | GHZ fidelity from stabilizer expectation values (--noisy, --hardware) |
quantum_teleportation.py, aether_decoder.py | Teleportation protocol and Qiskit bit-order analysis |
run_bell_state.py, run_ghz_relay.py, bell_state.ipynb | Simulator demos |
export_quantum_data.py, quantum_gui.py | quantum_data.csv (simulator, noise model, hardware) and a Tkinter viewer |
dna_encode.py, bio_archive_report.py | DNA encoding and the report archive (archive / restore / verify) |
save_ibm_account.py | Save the IBM Quantum token locally without echoing it |
results/ | Recorded experiment results (JSON) |
deploy/ | Server install script, systemd unit, PayPal/admin configuration, nginx example |
tests/ | Unit tests |
Run locally / التشغيل المحلي
python -m venv .venv
.venv\Scripts\activate # Linux/macOS: source .venv/bin/activate
pip install -r requirements.txt -r requirements-quantum.txt
python -m unittest discover -s tests -t .
python quantum_saas_app.py # http://127.0.0.1:5000
Payments are disabled until PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET are set; the scan itself works without them.
Deploy / النشر
On the server (Ubuntu/Debian, as root), from a copy of this repository:
bash deploy/install.sh # installs or updates the app, keeps data and settings
bash deploy/configure.sh # asks for the PayPal secret and admin password (hidden input)
Data lives in /var/lib/quantum_saas, settings in /etc/quantum_saas.env, and the service runs as the unprivileged user quantum behind nginx.
install.sh also enables the weekly /adoption scan (quantum_adoption.timer, Mondays 03:30 UTC). To run it right away: systemctl start quantum_adoption.service.
Notes on the science / ملاحظات علمية
- 96.29% is the GHZ population P(000)+P(111), an upper bound on the fidelity. Use
ghz_fidelity.pyfor the fidelity itself. - The DNA sequence is a digital encoding; nothing was synthesized.
- Shor's algorithm breaks RSA and elliptic-curve keys of any size; larger RSA keys do not provide quantum safety. What protects recorded traffic today is a post-quantum key exchange such as X25519MLKEM768.
Questions fréquentes
Qu'est-ce que Quantum Aether ?
Check a website's post-quantum TLS readiness (ML-KEM key exchange, certificate, grade)
Comment installer Quantum Aether ?
Il s'exécute sur votre machine. Dans Claude Code : claude mcp add quantum-aether -- uvx quantum-aether-mcp==1.0.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour Quantum Aether ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
Quantum Aether est-il open source ?
Son code est public sur GitHub, mais le dépôt ne déclare pas de licence standard.
Qui maintient Quantum Aether ?
Il est publié par moncef00327-cloud. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.