§ QuantumPay · Payment authorization

Authorize payments the quantum era can't forge.

QuantumPay lets a payer cryptographically authorize a payment intent — payee, amount, currency, expiry — with a hybrid post-quantum signature (Ed25519 + ML-DSA-87 + optional SLH-DSA). A processor verifies the authorization is authentic, amount- and payee-bound, unexpired, and not replayed before it acts. It is the authorization layer — it does not move money. Settlement stays on a regulated rail (a licensed processor, card network, or broker).

View the SDK → Book a pilot →

What a processor can verify § I

Bound, fresh, and un-replayable.

Authenticity — the payer (whose id binds their keys) authorized this exact payee + amount + currency; forging needs to break a classical AND a lattice (AND hash-based) family at once — given the pinned keys, under the declared trust model.
Amount & payee binding — change a single field and the hybrid signature fails. Amounts are integer minor units (cents/sats) — no float rounding.
Anti-replay — verifyAndConsume records each nonce on success, so the same authorization can't be spent twice (backed by a durable store you control).
Expiry & caps — authorizations expire; verifiers can enforce amount caps and an expected payee/currency.

How it works § II

Authorize → verify → settle.

The payer hybrid-signs a payment intent (payee, amount in minor units, currency, nonce, expiry).
The processor verifies the signature + bindings and atomically consumes the nonce (rejecting any replay) before acting.
The regulated rail — a licensed PSP, card network, or broker — performs the actual settlement. QuantumPay never touches the money.

import { createAuthorization, verifyAndConsume, makeNonceLedger } from 'pqpay'

Reference implementation · in active development · authorization layer · unaudited

QuantumPay is an unaudited reference implementation of post-quantum payment AUTHORIZATION. It signs and verifies authorizations; it does NOT move, hold, custody, or settle funds, and it is not a payment institution, money transmitter, broker, or financial advisor. Settlement is performed by a separate, appropriately licensed payment rail. Anti-replay requires a durable, atomic nonce store on the verifier. Nothing here is an offer of any security, token, or financial instrument, or financial/legal advice.