One platform · four paths

Solutions for every role.

MyPQC fits how you already work. Whether you govern crypto risk for a regulated enterprise or ship code or run national infrastructure or build on a partner stack there's a post-quantum path here for you.

Enterprise & CISOs · Developers · Government · System integrators

For Enterprise & CISOs

Quantum-readiness for regulated industries

You can't migrate what you can't see. You also can't re-engineer every application just to change an algorithm. MyPQC turns post-quantum migration into a governed and repeatable program: inventory first then agility then a controlled migration.

The pains

  • No single view of which algorithms actually run across servers and apps and code. That means no way to know what's quantum-vulnerable first.
  • Cryptography is hard-wired into applications. Any change becomes a re-engineering project instead of a policy decision.
  • Regulators and boards want evidence of a migration plan mapped to recognized guidelines. Not a spreadsheet.

Framed against NIST's proposed timeline (draft NIST IR 8547) to deprecate RSA/ECC around 2030 and disallow them around 2035 and against Malaysia's national post-quantum migration priorities.

How MyPQC helps

1 · Inventory

MCert continuously discovers your crypto estate and generates a CycloneDX CBOM/SBOM with quantum-risk scoring so you know what to migrate first.

2 · Agility

The Crypto Agility Core Engine governs which algorithm runs as policy not code. Schedule an effective-dated transition and connected systems switch without a redeploy.

3 · Migration

A controlled path off quantum-vulnerable algorithms with a tamper-evident audit trail and compliance mapping to NIST 800-131A · MySEAL · NACSA · BNM RMiT.

For Developers

Drop-in crypto-agility that's code-first

Add post-quantum cryptography to the Java Cryptography API you already write. Register the Antrapol JCE provider behind your existing Signature · Cipher · KeyPairGenerator calls. The design target is under 5% cryptographic code change.

Drop-in and not a rewrite

Registers as a standard Java Security Provider behind your existing JCE calls. There's no bespoke crypto API to learn and it runs on a Java 17 toolchain.

PQC as first-class algorithms

ML-DSA (FIPS 204) · SLH-DSA (FIPS 205) · ML-KEM (FIPS 203) and Malaysia's KAZ-SIGN ship as native services. Swap classical for post-quantum by policy with no refactor.

Self-describing outputs

An agility envelope packages algorithm and variant metadata with every output. Signatures and ciphertext stay verifiable and decryptable after your default algorithm changes.

QuantumSafeSigning.java
import java.security.*;
import com.antrapol.jce.Antrapol;

Antrapol.install();

// Post-quantum ML-DSA (FIPS 204) through the standard JCE API
KeyPairGenerator kpg =
    KeyPairGenerator.getInstance("ML-DSA", "Antrapol");
KeyPair kp = kpg.generateKeyPair();

Signature signer = Signature.getInstance("ML-DSA-65", "Antrapol");
signer.initSign(kp.getPrivate());
signer.update(payload);
byte[] sig = signer.sign(); // agility-encoded and quantum-safe

For Government

National infrastructure for Malaysia's PQC migration

Malaysia-built and Malaysia-controlled. Malaysia's KAZ algorithms are offered alongside the NIST PQC standards. Identity and signing follow the Digital Signature Act 1997. The national migration off quantum-vulnerable cryptography stays under your control.

National policy-selectable algorithms

Malaysia's KAZ-SIGN and KAZ-KEM run alongside NIST ML-DSA · ML-KEM · SLH-DSA. They're an optional Malaysian choice that crypto-agility lets you select or swap at any time.

Aligned to the DSA 1997

Sovereign PQC Digital ID links to an X.509 certificate. A signature can then carry Digital Signature Act 1997 legal recognition when the certificate is issued under an MCMC-licensed CA. This is a deployment capability delivered as design intent.

National crypto visibility

MCert gives continuous national cryptographic visibility with signed and encrypted reporting to NACSA and Bank Negara Malaysia over a secure channel. Reporting maps to MySEAL and PTPKM.

Aligned with Malaysia's national post-quantum migration priorities and the MyDigital agenda.

For System Integrators

Build on the MyPQC API layer

Embed quantum-safe identity and signing and file sharing into your solutions without building cryptography yourself. One standards-based API covers the whole platform. It's multi-tenant with per-subscriber isolation.

One API over the platform

A single integration surface across the four apps and the crypto-agility engine and managed PKI. You consume capabilities instead of reimplementing crypto.

Standards-based interfaces

JCE · gRPC / Dubbo Triple / REST · CycloneDX · the W3C DID data model · OpenAPI 3.0 slot into existing architectures.

Multi-tenant by design

Per-subscriber isolation lets you serve many clients on one platform and embed PQC ID and signing and secure file sharing into each solution.

Find the post-quantum path that fits your role

Tell us where you're starting: governance or code or national deployment or integration. We'll show you the fastest route to quantum-safe.