One entry, one commit: adds subtlepq to the JavaScript section (alphabetically between sjcl and TweetNaCl.js).
Why it's awesome: it's the first polyfill of the WICG Modern Algorithms draft for the Web Cryptography API — ML-KEM (FIPS 203) and ML-DSA (FIPS 204) as crypto.subtle algorithms with the draft's new encapsulateBits/encapsulateKey/decapsulateBits/decapsulateKey/getPublicKey/supports methods and the full key-format surface (seeds, SPKI, PKCS#8, JWK AKP, wrapKey/unwrapKey). Unlike raw-primitive libraries (noble-post-quantum, already listed), it exposes the standard WebCrypto API shape, delegates per algorithm to native implementations where they exist (Node >= 24.7 has ML-KEM/ML-DSA natively), and self-retires as platforms catch up. It also includes a DHKEM (RFC 9180) adapter over native ECDH so existing ECDH code can move to the KEM calling convention before going post-quantum.
Apache-2.0. Engine is a minimal reproducible liboqs wasm build (75 KB for all six parameter sets). Correctness is anchored to NIST ACVP known-answer vectors, RFC 9180 Appendix A vectors, and a byte-parity suite against Node's native implementation.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/sobolevn/awesome-cryptography/pull/284
**Author:** [@vesvault-claude](https://github.com/vesvault-claude)
**Created:** 7/13/2026
**Status:** 🔄 Open
**Base:** `master` ← **Head:** `subtlepq`
---
### 📝 Commits (1)
- [`9530404`](https://github.com/sobolevn/awesome-cryptography/commit/9530404a41b17b8243eadecaf6adea1822616fb9) Add subtlepq
### 📊 Changes
**1 file changed** (+1 additions, -0 deletions)
<details>
<summary>View changed files</summary>
📝 `README.md` (+1 -0)
</details>
### 📄 Description
One entry, one commit: adds subtlepq to the JavaScript section (alphabetically between sjcl and TweetNaCl.js).
Why it's awesome: it's the first polyfill of the WICG Modern Algorithms draft for the Web Cryptography API — ML-KEM (FIPS 203) and ML-DSA (FIPS 204) as `crypto.subtle` algorithms with the draft's new `encapsulateBits`/`encapsulateKey`/`decapsulateBits`/`decapsulateKey`/`getPublicKey`/`supports` methods and the full key-format surface (seeds, SPKI, PKCS#8, JWK `AKP`, wrapKey/unwrapKey). Unlike raw-primitive libraries (noble-post-quantum, already listed), it exposes the standard WebCrypto API shape, delegates per algorithm to native implementations where they exist (Node >= 24.7 has ML-KEM/ML-DSA natively), and self-retires as platforms catch up. It also includes a DHKEM (RFC 9180) adapter over native ECDH so existing ECDH code can move to the KEM calling convention before going post-quantum.
Apache-2.0. Engine is a minimal reproducible liboqs wasm build (75 KB for all six parameter sets). Correctness is anchored to NIST ACVP known-answer vectors, RFC 9180 Appendix A vectors, and a byte-parity suite against Node's native implementation.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/sobolevn/awesome-cryptography/pull/284
Author: @vesvault-claude
Created: 7/13/2026
Status: 🔄 Open
Base:
master← Head:subtlepq📝 Commits (1)
9530404Add subtlepq📊 Changes
1 file changed (+1 additions, -0 deletions)
View changed files
📝
README.md(+1 -0)📄 Description
One entry, one commit: adds subtlepq to the JavaScript section (alphabetically between sjcl and TweetNaCl.js).
Why it's awesome: it's the first polyfill of the WICG Modern Algorithms draft for the Web Cryptography API — ML-KEM (FIPS 203) and ML-DSA (FIPS 204) as
crypto.subtlealgorithms with the draft's newencapsulateBits/encapsulateKey/decapsulateBits/decapsulateKey/getPublicKey/supportsmethods and the full key-format surface (seeds, SPKI, PKCS#8, JWKAKP, wrapKey/unwrapKey). Unlike raw-primitive libraries (noble-post-quantum, already listed), it exposes the standard WebCrypto API shape, delegates per algorithm to native implementations where they exist (Node >= 24.7 has ML-KEM/ML-DSA natively), and self-retires as platforms catch up. It also includes a DHKEM (RFC 9180) adapter over native ECDH so existing ECDH code can move to the KEM calling convention before going post-quantum.Apache-2.0. Engine is a minimal reproducible liboqs wasm build (75 KB for all six parameter sets). Correctness is anchored to NIST ACVP known-answer vectors, RFC 9180 Appendix A vectors, and a byte-parity suite against Node's native implementation.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.