State-level adversaries already copy encrypted data they cannot read yet, betting that a future quantum computer will break today’s public-key cryptography. This is called “harvest now, decrypt later”. The vault is built so that bet fails.
The algorithms
- Kyber (ML-KEM)A lattice-based key encapsulation mechanism, standardized by NIST, that protects the keys sealing your files.
- Dilithium (ML-DSA)A lattice-based signature scheme, standardized by NIST, that signs vault contents so tampering is detected.
- Hybrid designBoth are layered with proven classical cryptography. An attacker has to break the classical and the post-quantum layer together.
How it fits the device
The vault sits on top of Android’s file-based encryption, whose keys are already bound to Titan M2. Files you place in the vault get the additional post-quantum layer. The vault key never leaves the device and is not escrowed with ThetaSecurity.
If you forget the passphrase, the vault cannot be recovered by anyone, including us. Keep a copy of anything irreplaceable somewhere you control.