Skip to content
Standards
NIST FIPS 203 · 204 · 205
Launch chain
Solana
Cryptography
In your browser
Phase
1 · open beta

KiboraPost-quantum security toolkitOn Solana

Kibora: the quantum defense kit for Web3 wallets

Defend Your Keys Today. Quantum-Ready Tomorrow.

Quantum threat coming. Kibora protects now. Learn if the chain already shows the key behind your address, then try the replacements NIST published in 2024: new key pairs, signatures and encryption, computed on the device in front of you.

Hold $KIBORA to unlock the whole toolkit after launch. Until then every tool is open.

lattice · basis b₁ b₂target = point + small error

Toolkit

Seven tools · one terminalPhase 1

Early access

Open beta

Phase 1 is open to everyone. A wallet signature (free, no transaction) gets you a beta code, one per wallet, that keeps working once holder tiers switch on.

  1. 01Link a wallet
  2. 02Approve one login
  3. 03Note your code
Claim a codeCosts nothing · nothing sent
Live from Solana
Slot
…
Slot time
…
Priority fee
…
median, recent slots
SOL / USD
…
price feed
Anchor a key
…
Memo tx, at this fee
Keys in the book
…
local store on this server

01The problem

Wallet keys that age badly

Every wallet on Solana, Bitcoin and Ethereum is protected by elliptic-curve signatures (Ed25519 on Solana). They are excellent against every computer we have. Against a large, error-corrected quantum computer executing Shor's algorithm they are not: such a machine could turn a public key back into the private key behind it.

Nobody can build that machine today, and nobody can promise when someone will. Public estimates of the hardware it needs have dropped several times in the last few years, and NIST's draft transition plan proposes retiring today's public-key algorithms over the next decade. The cautious reading is simple: plan for it before it is urgent.

Two facts make the plan concrete. First, a blockchain never forgets. On Solana a wallet address is its public key from day one; on Bitcoin and Ethereum the key becomes recoverable from the first signature, and it stays recoverable forever. Second, encrypted data can be copied now and read later. Anything you protect today with classical key exchange is only as safe as that exchange will be in the future.

Kibora turns those facts into things you can check and do: which of your addresses have already revealed their keys, which algorithms replace the vulnerable ones, and how to encrypt your own data with them now.

02The terminalSeven tools

Seven post-quantum tools in one terminal

Every tool in detail →
  1. 01Working

    Exposure Scan

    Risk assessment

    Paste any address, Solana first, to learn whether the key behind it is already public, with one answer per network.

    Open Exposure Scan →
  2. 02Working

    Key Forge

    Key generation

    Create post-quantum key pairs, derive shared secrets and sign or check messages with the standardized schemes.

    Open Key Forge →
  3. 03Working

    Seal

    Encryption

    Encrypt a message or a file to a post-quantum key in the browser, and open what was sealed to yours.

    Open Seal →
  4. 04Working

    Watch

    Wallet monitoring

    Keep a list of Solana or EVM addresses and see, every time you look, whether one of them has new activity or has just revealed its key.

    Open Watch →
  5. 05Working

    Algorithm Atlas

    Algorithm explorer

    One table for all of them: purpose, underlying problem, byte sizes and speed on the machine you are using.

    Open Algorithm Atlas →
  6. 06Working

    Standards Desk

    Standards documentation

    The three NIST standards and the migration guidance in plain words, each linked to its primary source.

    Open Standards Desk →
  7. 07Working

    Commons

    Community tools

    Shared pieces: a public book of post-quantum keys signed by Solana wallets and anchored on-chain, plus Ward, a delay vault you can practise with.

    Open Commons →
  8. Exposure Scan and Key Forge work without sign-up or wallet. Try one address or one algorithm in the next minute.

    Open the terminal →

03How it works

Read the chain, keep the keys: client-side cryptography

A

Scans read, never write

Exposure Scan reads the account itself: whether it is a wallet key, a program-derived address or a program, how active it is and what depends on it. On Bitcoin and EVM chains it counts the spends that revealed the key. No wallet, no signature, no fee.

B

Algorithms run on your device

Key Forge, Seal and the Atlas use @noble/post-quantum, an open-source implementation of FIPS 203, 204 and 205, inside your browser. Secret keys and readable content remain in the page's memory unless you choose to export them.

C

Shared records, anchored on-chain

Lattice Book records are signed by the wallet they belong to, and one Memo transaction writes the key's hash into Solana. Kibora runs no program and no server wallet. Ward (delayed withdrawals with a guardian) runs as a labelled practice: no funds move.

04Access$KIBORA

Sign a message, send nothing

Access is proven with a Sign-In With Solana message: your wallet signs a short plain-text note naming this site, your address, a one-time number and an expiry. It moves nothing, costs nothing and cannot be replayed elsewhere.

$KIBORA is the key to the full toolkit, not a governance token and not a farming scheme. After launch the free tier keeps Exposure Scan, Key Forge, the Atlas and the Standards Desk; holders also get Seal, Watch and the Commons tools. Thresholds are published on the token page before any gate switches on.

During Phase 1 a wallet can take one beta access code. Codes issued now stay valid after launch, tied to the wallet that signed for them.

What your wallet will show

kibora.xyz wants you to sign in with your Solana account:
7xKX…q9Fd

Kibora terminal login. Signing this only proves you hold the address above; nothing is sent and no fee is paid.

URI: https://kibora.xyz/terminal
Version: 1
Chain ID: mainnet
Nonce: 5c1e09a4b2d7f3e8.c6a1b0d97e2f44a1
Issued At: 2026-10-16T09:00:00Z
  • No recovery words
  • No key exports
  • No allowances
  • No fee to log in

05Who uses it

Built for people who hold keys

01

Holders

You keep savings on Solana and other chains and want to know what each address exposes. Scan them, map every account one key controls, and publish a post-quantum key so you are ready to move when quantum-safe accounts arrive.

02

Builders

You are adding post-quantum signatures or encryption to an app. Key Forge and the Atlas show real sizes and timings on real devices, and the Lattice Book gives your users a public place to publish ML-KEM keys.

03

Teams and funds

You answer to a security policy. The Standards Desk turns FIPS 203, 204, 205 and NIST's draft transition timeline into plain notes you can cite, and Watch keeps an eye on treasury addresses.

04

Privacy-minded people

You do not hand keys to websites. Here nothing secret leaves the tab: keys are made, used and exported on your device, and a seal can be opened without this site existing.

06Principles

Standards over promises, facts over fear

NIST algorithms only
The three FIPS families (lattice KEM, lattice signatures, hash signatures) exactly as specified. Nothing invented in-house, no private formats.
Nothing secret leaves the tab
Private keys and readable content never travel. Our server verifies logins and tallies scans, and that is the whole of its view.
Honest about timing
A revealed key matters later, not today, and every report is written that way. Forecasts are quoted with their authors, as forecasts.
Read-only by default
Scanning, watching and reading the key book send nothing. The only transactions are the ones you start in Commons.
No custody
Kibora runs no smart contract and no server wallet. The only transaction it ever asks for is a Memo that anchors your own key hash.
Open formats
Seal envelopes and key files are documented, so your data never depends on this website staying online.

07Questions

Kibora, in plain words

All questions →

What is Kibora?

Kibora is a post-quantum security toolkit for crypto wallets, starting on Solana. It shows whether the key behind an address can already be read from the chain, and it lets you try NIST's replacement algorithms (ML-KEM, ML-DSA, SLH-DSA) for keys, signatures and encryption without leaving your browser.

How does Kibora work?

Two ways. Exposure Scan asks public nodes for an address's transaction count, balance and code, then explains what that would mean if large quantum computers arrive. The cryptography tools run the standardized algorithms locally with an open-source library, so your secrets stay on your hardware. The public key book keeps records signed by Solana wallets, which their owners can anchor on Solana with a Memo transaction. Ward is a practice vault: no funds move. Kibora runs no smart contract of its own.

Is my wallet in danger today?

Present-day quantum computers are nowhere near turning a public key into its private key. The risk is about the future: keys published now stay public, and published research keeps lowering the estimated size of the machine needed. Exposure Scan reports a public key as a future risk, never as a present breach.

How do I buy $KIBORA?

$KIBORA has not launched yet, so there is no token address and nothing to buy. When it launches, the address will be published on the token page of this site and on @kibora on X, and the site's Copy CA button will switch on. Any token called $KIBORA before that is not ours.

Which network is Kibora on?

Solana mainnet. The token launches on pump.fun there, the access check reads its balance there, and Lattice Book anchors are Memo transactions there. Exposure Scan also reads Bitcoin, Ethereum and Base, since many people hold keys on several networks.

What does holding $KIBORA unlock?

Before launch, everything is open. After launch, Exposure Scan, Key Forge, Algorithm Atlas and Standards Desk stay free; Seal, Watch and the full Commons tools are for holders, and for wallets that took a beta access code during Phase 1. The check is a balance lookup; your tokens are never staked, frozen or put under an allowance.

Check one address today

It takes a few seconds, needs no wallet and tells you more about your key than any price chart will.

Run Exposure Scan