Aegis
PQC migration SDK. Scans C, C++, and Rust codebases for legacy RSA and ECC cryptography, constructs OMB M-26-15 migration plans, and emits drop-in ML-KEM and ML-DSA primitives.
01
What it does
Classical Cryptography Scanner
Discovers every RSA, ECC, ECDSA, DH, and Ed25519 invocation across source code, dependencies, and build scripts.
OMB M-26-15 Alignment
Automatically generates transition roadmaps formatted to federal OMB M-26-15 and NIST FIPS 203/204/205 standards.
Drop-in Post-Quantum Shims
Emits drop-in ML-KEM-768 key encapsulation and ML-DSA-65 digital signature code with standard EVP_PKEY compatibility.
CI Regression Gate
Halts builds on classical cryptographic regressions, asserting pkey_algo ∈ {ML-KEM, ML-DSA, hybrid}.
02
Installation
# Install Aegis via the studio2201 installer:
curl -fsSL https://studio2201.com/install.sh | sh -s aegis03
Terminal usage
# Scan repository for classical cryptography call sites
aegis scan --src ./src
# Generate OMB M-26-15 compliance plan
aegis plan --format omb-m-26-15 --output migration.json
# Gate CI pipeline on post-quantum compliance
aegis check --policy strict-pqc04
Federal Mandates & Timelines
EO 14412 Deadline
Federal HVAs must establish PQC key encapsulation by Dec 31, 2030. FAR Council rules cascade this mandate to all federal contractors.
RSA/ECC Sunsetting
Classical public-key cryptography is deprecated by 2030 and strictly disallowed across government systems by 2035.
Hybrid Transition Support
Supports dual classical/PQC negotiation during the migration window to preserve backwards compatibility.
Open Architecture
All core scanning and migration tooling is completely open under Apache-2.0 with no vendor lock-in.