Trust by construction
Standards, frameworks, and disclosure.
The public standards 4 Qubits is built on, the regulator frameworks we map to, and where to find our security-disclosure and verification artifacts.
Cryptographic standards
FIPS 204 — ML-DSA
Module-lattice digital signatures (Dilithium). Default ledger signing algorithm.
FIPS 203 — ML-KEM
Module-lattice key encapsulation (Kyber). PQC key exchange.
FIPS 205 — SLH-DSA
Stateless hash-based signatures (SPHINCS+). Conservative backup signature.
RFC 6962
Certificate Transparency Merkle audit-path verification.
RFC 3161
Time-Stamp Protocol for external non-repudiation anchoring.
NIST SP 800-57
Key management lifecycle. 90-day crypto-period for high-sensitivity material.
Regulatory frameworks
SEC Cyber Disclosure Rule (Item 106)
Director cybersecurity oversight evidence.
OCC 2023-22
Heightened operational risk for large U.S. banks.
OSFI B-13
Canadian operational risk and resilience.
DORA Art. 9
EU digital operational resilience — ICT risk management.
NIS2
EU directive on network and information system security.
NYDFS 500.17
Cybersecurity event and governance reporting.
PCI DSS v4.0 §12.3.3
Annual cryptographic suite review.
OMB M-23-02
U.S. federal PQC inventory mandate.
NSM-10 / NSA CNSA 2.0
National Security Systems PQC adoption deadlines.
SOC 2 Type II
Trust services criteria (security, availability, confidentiality).
HIPAA
Security Rule technical safeguards.
CMMC 2.0
DoD contractor cybersecurity maturity.
Public artifacts
Drop any 4 Qubits attestation JSON, see the Merkle inclusion proof and ML-DSA-87 signature verified entirely in your browser. Zero backend trust.
security.txt (RFC 9116) with our coordinated-disclosure address and PGP key. Required by federal procurement; expected by every Tier-1 vendor risk review.
Live operational status for the public surfaces of the platform.
Free weekly post-quantum readiness briefing, threat-level dashboard, and milestone tracker. Hosted on 4qubits.com.