What is VORTEX-256?

A post-quantum Key Encapsulation Mechanism based on Rotational Module Learning With Errors (RotMLWE). It establishes a 32-byte shared secret between two parties and uses the same wire sizes as Kyber-512.

→ Overview

Is VORTEX-256 NIST-approved?

No. VORTEX-256 is a research preview with a novel cryptographic assumption. For NIST-approved post-quantum KEM, use ML-KEM (FIPS 203) via Kyber-PQC.

→ Comparison guide

Can I use VORTEX keys with Kyber?

No. Although public keys (800 B) and ciphertexts (768 B) are the same size, the byte layouts and algorithms are completely different. Keys and ciphertexts are not interchangeable.

Do I need a C compiler?

No. The package installs and works with pure Python only. A C compiler enables the faster native backend (~10× throughput).

pip install vortex-pqc   # works either way

What Python versions are supported?

Python 3.10, 3.11, 3.12, 3.13, 3.14 (and newer). Tested in CI on 3.10–3.12 across Ubuntu and macOS.

What happens if someone tampers with a ciphertext?

VORTEX uses implicit rejection: decapsulation returns a pseudorandom 32-byte value (not the real shared secret) without raising an error. This prevents padding oracle attacks.

→ Core concepts — Implicit rejection

Can I use the 32-byte shared secret directly as an AES key?

You should derive an application key with HKDF:

import hashlib
session_key = hashlib.hkdf_derive("sha256", 32, shared_secret,
                                   salt=b"my-app", info=b"session")

What is RotMLWE?

A variant of Module-LWE where the public matrix is replaced by Frobenius rotations of a single ring element. The same scalar secret is hidden under each rotation.

→ Core concepts

How does VORTEX compare to Google's post-quantum efforts?

Google has integrated ML-KEM (Kyber) into Chrome/TLS for production post-quantum hybrid key exchange. VORTEX-256 is a research alternative exploring a different lattice assumption at the same wire footprint. It is not a drop-in replacement for Google's ML-KEM deployment.

→ Comparison guide

Where is the documentation published?

• In-repo: docs/
• Central portal: bajpai-labs/documentation/docs/vortex-pqc
• Auto-synced on every push to main that changes docs/

How do I report a security bug?

Email hello@bajpailabs.com — do not file a public issue.

→ Security model — Reporting

What license is VORTEX-256 under?

MIT License. Free for commercial and non-commercial use.