HSM / PKCS#11 / GitOps Secrets (SOPS)
Unreviewed
What you will do: Encrypt GitOps secrets with SOPS + age using the X-Wing hybrid KEM (X25519 + ML-KEM-768) via the age-plugin-pqctoday ...
Worked example: Connect the separately operated Docker sandbox, open the GitOps Secrets (SOPS) scenario, and compare its X-Wing, ML-KEM-768, SOPS workflow with the stated migration goal.
Runtime and privacy: This scenario requires a separately operated, access-gated Docker runtime. The public page explains the exercise but does not send inputs to or start a container unless you configure and connect that runtime.
This tool is under active development — functionality may be incomplete or subject to change.
pqctoday-sandbox is not reachable
Start the Docker stack: cd ~/antigravity/pqctoday-sandbox && docker compose up -d. Then reload this page.
Related content
Next in HSM / PKCS#11