Quantum-Seeded Security
for Financial Infrastructure
Transaction IDs, OTPs, nonces, and signing keys generated from a quantum entropy source. Quantum-seeded randomness built to support demanding compliance requirements.
Overview
Predictable Transaction IDs
Sequential or PRNG-based IDs can be enumerated, enabling transaction scraping and replay attacks on payment systems.
Weak Key Generation
PRNG-seeded cryptographic keys have finite entropy. Adversaries with enough compute can brute-force the seed space.
Compliance Gaps
Auditors increasingly ask where your randomness comes from. A non-cryptographic generator like Math.random() is a common finding.
"backend": "quantum_seeded" to use QuantumRand's generator seeded from real IBM Quantum hardware, or "ibm_hardware" for a direct hardware run. Every response is labelled with the source that produced it, and if the chosen backend is unavailable the call fails rather than quietly switching source.Transaction ID
Quantum-random 128-bit transaction IDs. Collision-resistant, non-enumerable, and non-deterministic.
One-Time Password
Quantum-seeded 6 or 8 digit OTPs with configurable TTL. Each code is backed by quantum-seeded entropy.
Cryptographic Nonce
256-bit quantum nonces for replay protection. Every value is statistically unique and unpredictable.
Ed25519 Keypair
Ed25519 signing keypairs seeded with quantum entropy. The private key is generated on our server, returned once and never stored.
HMAC Audit Signature
Sign any payload with a quantum-seeded HMAC-SHA256 key. Returns the HMAC value but not the key, so it cannot be re-verified later; don't rely on it as tamper evidence yet.
/generate API and any call made with "backend": "quantum_seeded". Until the first hardware seed arrives after a restart, those bits come from the OS CSPRNG and the source label says so.Audit logging
Per-key request logging, useful as evidence for your own SOC 2 audit. Every response is labelled with its entropy source. QuantumRand itself holds no SOC 2 report.
PCI-DSS
Usable as a key-generation entropy source in a PCI-DSS environment, with a labelled CSPRNG fallback. QuantumRand is not PCI-certified; your assessor decides.
ISO 27001
Provable entropy source documentation. Quantum-circuit simulator by default for these endpoints; the IBM-hardware-seeded generator or a direct hardware run on request, with each response labelled by source.
Audit Logs
Every API call logged with endpoint, source, latency, and entropy type. Export to CSV anytime from your dashboard.
HMAC Signatures
HMAC-SHA256 values from quantum-seeded keys. Not yet re-verifiable.
Source Badges
Every response tagged with its entropy source: quantum, hybrid, or fallback. Full transparency on every call.
- 500,000 calls / day
- 2,048 bits max
- Priority support
- CSV export + webhooks
- 10,000,000 calls / day
- 4,096 bits max
- Dedicated support
- SLA + custom integrations
Get priority access to quantum financial security
Join the waitlist to lock in early-adopter pricing and get a dedicated onboarding session with our team. Limited spots available.