MetaMUI Crypto Primitives
Side-channel claim limit. Nothing on this page claims constant-time behaviour or side-channel resistance for any target: the side-channel harness covers nothing (finding A48) and no measurement exists. The Rust and C cores are designed for constant time and unmeasured; managed runtimes (JIT, GC, bounds checks) make no timing claim. Where this page names constant-time or side-channel techniques, in prose or in code, they are design intent or recommendations, not measured properties.
Post-quantum and classical cryptography for ten language targets.
한국어: 소개 (초안) · 빠른 시작 (초안) — draft pages awaiting owner review.
49
Catalogued profiles
10
Platforms
16
Algorithm families
NIST + KPQC
Standards
Getting the code
The packages for all ten targets are release candidates; none is published on a package registry yet. To build from source, follow the Installation Guide, which lists the build command for each language.
Hardware Acceleration
The public release carries portable implementations only (owner rule of 2026-09-24): no SIMD, assembly, GPU or CPU-feature-detection path is part of it. The backends below exist in this source tree outside the release. No performance claim is made for any backend.
| Backend | Architecture | Algorithms | Register Width |
|---|---|---|---|
| AVX-512 | Intel Ice Lake+, AMD Zen 4+ | Falcon NTT/FFT, BLAKE3 batch | 512-bit (32 x u16) |
| AVX-2 | x86-64 (Haswell 2013+) | Falcon, BLAKE3, ML-KEM, HAETAE | 256-bit (16 x u16) |
| ARM NEON | AArch64 (all ARM64) | Falcon, BLAKE3, ML-KEM | 128-bit (8 x u16) |
| Apple Metal | Apple Silicon M1-M4 | Falcon NTT, BLAKE3, SMAUG-T | GPU compute shaders |
| NVIDIA CUDA | CC 8.9+ (Ada Lovelace) | BLAKE3 batch, SMAUG-T | GPU parallel kernels |
| Portable | Any platform | Every catalogued profile | Scalar code; the only path in the public release |
All SIMD paths are written with branchless masking as constant-time design intent; constant-time behaviour is not claimed (unmeasured, A48). Learn more →
Getting Started
Build from source for your platform
Hardware Acceleration
AVX-512, NEON, Metal GPU, CUDA
Algorithms
49 catalogued profiles in 16 families
API Reference
Documentation for all 10 platforms
Security
Constant-time behaviour and side-channel resistance are not claimed; both are unmeasured (A48).
Interoperability
Cross-language verification across 10 platforms
Security
- Constant-time implementations - not claimed (unmeasured, A48)
- Secure memory clearing - Automatic zeroization of sensitive key material
- Side-channel resistance - not claimed (unmeasured, A48)
- IND-CCA2 security - Fujisaki-Okamoto transform for all KEM constructions
- Test vector validation - Verified against NIST CAVP/ACVP and KPQC KAT vectors
Supported Platforms
| Platform | Module |
|---|---|
| Rust | metamui-crypto-rust |
| C | metamui-crypto-c |
| Swift | metamui-crypto-swift |
| Go | metamui-crypto-go |
| Python | metamui-crypto-python |
| TypeScript | metamui-crypto-typescript |
| Kotlin | metamui-crypto-kotlin |
| Java | metamui-crypto-java |
| C# | metamui-crypto-csharp |
| WASM | metamui-crypto-wasm |
Algorithms
The release catalog (documents/public-release/catalog.json) lists 49 profiles in 16 families,
45 of them mandatory:
Post-quantum (NIST) — ML-KEM-512/768/1024 (FIPS 203), ML-DSA-44/65/87 (FIPS 204), SLH-DSA SHA2 and SHAKE at 128s/128f/192s/192f/256s/256f (FIPS 205, 12 sets), Falcon-512/1024 (Round 3, compressed and padded)
Post-quantum (KpqC) — SMAUG-T, HAETAE, AIMer, NTRU+; SOLMAE (TTA standard, Rust and C, optional)
Classical — BLAKE3, SHA3-256, SHAKE256, Keccak-256, AES-256-GCM, HKDF-SHA256, Ed25519, sr25519
HQC, FrodoKEM, Classic McEliece, NTRU Prime (sntrup), LMS/HSS and XMSS/XMSS^MT are deferred families: they are outside the 1.0 catalog. The source tree carries further algorithms that the catalog does not list; no release evidence is recorded for them there.
Licensed under the Apache License, Version 2.0 (Apache-2.0) - Sovereign Wallet Co., Ltd.