01Risk assessment
Working nowFree
Paste any address to learn if the key behind it can already be rebuilt from chain data, with one answer per network.
- Signed before? An account that has sent even one transaction has published its public key. The scan counts those transactions per network.
- What is at stake. What the address holds in native coin, and whether code lives there instead of a key.
- A sober verdict. A revealed key is tomorrow's problem rather than today's breach. The report says so and lists the sensible next steps.
- Check words. Four words computed from the address. An address forged to resemble yours fails the comparison before you send.
- Covers
- 5 networks: RH Chain, ETH, Base, BTC, SOL
- Input
- One address; nothing to sign
- Reads
- Public nodes, from your browser
- Cost
- Free, no transaction
02Key generation
Working nowFree
Create post-quantum key pairs, derive shared secrets and sign or check messages with the standardized schemes.
- The real algorithms. ML-KEM, ML-DSA and SLH-DSA as specified in FIPS 203, 204 and 205. Outputs are shown byte for byte.
- Measured on your device. Each operation reports how long your own browser needed, beside the byte count of what it produced.
- Gone when you leave. Keys live in the page's memory until you export them. Closing the tab erases them.
- Lattice KEM
- 3 sizes (FIPS 203)
- Lattice sig.
- 3 sizes (FIPS 204)
- Hash sig.
- SHA2 128f and 128s (FIPS 205)
- Engine
- noble post-quantum, v0.7.1
03Encryption
Working nowHolder
Encrypt a message or a file to a post-quantum key in the browser, and open what was sealed to yours.
- Hybrid by design. Each seal gets a new 32-byte secret from ML-KEM-768, stretched by HKDF into an AES-256-GCM key that both hides and authenticates the content.
- To an address. Seal to anyone who published an ML-KEM key in the Lattice Book, found by their wallet address.
- An open format. The byte layout is published in the docs, so other software with ML-KEM and AES-GCM can open your seals even if this site disappears.
- Key agreement
- ML-KEM-768
- Derivation
- HKDF with SHA-256
- Cipher
- AES-GCM, 256-bit
- Format
- KBSL envelope, version 1
04Wallet monitoring
Working nowHolder
Keep a list of addresses and see, every time you look, whether one of them has just revealed its key.
- First-signature alert. Watch remembers each address's transaction count and flags the moment a quiet address signs for the first time.
- Balances in one place. Native ETH on the three EVM networks, re-read while the page stays open.
- Stays on this device. The list is kept in your browser only. Nothing about it is sent to a Kibora server.
- Networks
- Robinhood Chain · Ethereum · Base
- Stored
- In this browser only
- Refresh
- Every 60 s while open
- Limit
- 25 addresses
05Algorithm explorer
Working nowFree
One table for all of them: purpose, underlying problem, byte sizes and speed on the machine you are using.
- Classical next to post-quantum. ECDSA, Ed25519, X25519 and RSA beside ML-KEM, ML-DSA and SLH-DSA, with sizes in bytes.
- A live benchmark. One button runs every algorithm on your device and fills in the timings column.
- Algorithms
- 8 post-quantum, 4 classical
- Benchmark
- In your browser
- Sources
- FIPS 203 · 204 · 205
06Standards documentation
Working nowFree
The three NIST standards and the migration guidance in plain words, each linked to its primary source.
- What each standard fixes. Parameter sets, security categories and intended use for FIPS 203, 204 and 205.
- Dates that matter. When the standards were published and what NIST's draft transition plan says about 2030 and 2035.
- Covers
- FIPS 203 · 204 · 205 · IR 8547 draft
- Links
- NIST primary sources
07Community tools
Practice until deployedFree + Holder
Shared, on-chain pieces: a public book of post-quantum keys and Ward, a safe that makes every withdrawal wait.
- Lattice Book. Publish your ML-KEM or ML-DSA public key against your address, so others can seal to you or check your signatures.
- Ward. A personal safe on Robinhood Chain. Outgoing transfers sit in a queue for a period you set, and a second wallet of your choice can stop them or sweep everything to your haven.
- Check words. The four-word fingerprint of any address, to read aloud or compare across devices.
- Contracts
- KiboraLatticeBook · KiboraWardForge
- Admin
- None: no owner, no fee
- Chain
- Robinhood Chain (4663)
- Status
- Practice until deployed
NextNot built yet
Planned, and labelled as planned
PlannedPlain-language assistant
A helper that talks you through a scan result or a Key Forge output in plain words. It sees just the parts you paste in, names its sources, and informs rather than certifies.
PlannedReadiness tracker
Where each major chain stands on post-quantum accounts, sorted into shipped, formally proposed and research, every entry linked to its source and dated.
LaterPhone app
Exposure Scan, Key Forge and Ward alerts as an iOS and Android app, keys held on the handset. Meanwhile the terminal already runs in phone browsers.
RulesEvery tool, every time
What no tool will ever do
01Invent cryptography
Only ML-KEM, ML-DSA and SLH-DSA as NIST published them, plus AES-256-GCM and HKDF from the browser's own crypto.
02Ask for secrets
Recovery words, key exports and allowances are off the table everywhere, always.
03Send while scanning
Scans and watches read public data. Only Commons sends transactions, and only when you press the button.
04Move keys off your device
Secrets are computed and kept in the browser. Our server only checks logins and tallies scans.
05Call a guess a fact
Quantum timelines are quoted as published estimates, with the source, never as a date.
06Lock your data
Seal and key-file formats are documented, so you can open your data without Kibora.