A web-based document authentication system using FAEST post-quantum digital signatures via the PyFAEST library.

• 📄 Document Signing - Upload and sign documents with FAEST post-quantum signatures
• ✅ Signature Verification - Verify document authenticity without login
• 🔐 Multiple Parameter Sets - Choose from 12 FAEST variants (128f, 128s, 192f, etc.)
• 📊 Performance Metrics - Real-time signing and verification timing
• 🗄️ Audit Trail - SQLite database tracks all signatures
• 🎨 Modern UI - Responsive Bootstrap interface
• 🔄 REST API - Programmatic access to signing/verification

• Backend: Flask (Python 3.8+)
• Cryptography: PyFAEST (FAEST post-quantum signatures)
• Database: SQLite
• Frontend: HTML/CSS/JavaScript with Bootstrap 5
• Hashing: SHA-256 for document fingerprints

pqc-document-auth/ ├── app/ │ ├── __init__.py # Flask app initialization │ ├── routes.py # API endpoints │ ├── models.py # Database models │ ├── crypto_utils.py # FAEST signing/verification │ ├── templates/ │ │ ├── base.html # Base template │ │ ├── index.html # Home page │ │ ├── sign.html # Document signing page │ │ └── verify.html # Verification page │ └── static/ │ └── css/ │ └── style.css # Custom styles ├── uploads/ # Temporary document storage ├── keys/ # Generated keypairs ├── instance/ # SQLite database (auto-created) ├── config.py # Configuration ├── run.py # Application entry point ├── requirements.txt # Python dependencies ├── .gitignore └── README.md 

• Python 3.8 or higher
• Linux (native or WSL), or macOS
• pip and venv

# Clone or navigate to project directory cd pqc-document-auth # Create virtual environment python3 -m venv venv source venv/bin/activate # On Windows WSL: source venv/bin/activate # Install dependencies pip install -r requirements.txt # Initialize database python run.py init-db # Run the application python run.py

The application will start at http://localhost:5000

1. Home Page (/)

   • Overview and features
   • Quick links to sign/verify

2. Sign Document (/sign)

   • Upload a file (PDF, image, text, etc.)
   • Select FAEST parameter set (128f, 128s, 192f, etc.)
   • Generate or use existing keypair
   • Download signature file
   • View performance metrics

3. Verify Signature (/verify)

   • Upload document and signature file
   • Provide public key
   • See verification result
   • View signature details

POST /api/keypair Content-Type: application/json { "param_set": "128f" } Response: { "public_key": "hex_encoded_key", "private_key": "hex_encoded_key", "param_set": "128f" }

POST /api/sign Content-Type: multipart/form-data Fields: - file: document file - param_set: "128f" | "128s" | "192f" | ... - private_key: hex encoded private key Response: { "signature": "hex_encoded_signature", "document_hash": "sha256_hash", "signature_size": 5924, "signing_time_ms": 5.2, "param_set": "128f" }

POST /api/verify Content-Type: multipart/form-data Fields: - file: document file - signature: hex encoded signature - public_key: hex encoded public key Response: { "valid": true, "document_hash": "sha256_hash", "verification_time_ms": 4.8, "param_set": "128f" }

• id - Auto-incrementing primary key
• document_hash - SHA-256 hash of document
• signature - FAEST signature (hex)
• public_key - Public key (hex)
• param_set - FAEST parameter set used
• signature_size - Size in bytes
• signing_time - Time taken to sign (ms)
• timestamp - Creation timestamp

⚠️ Important Notes:

• This is a demonstration/research project for academic purposes
• FAEST is still under NIST evaluation (not yet standardized)
• The reference implementation is not optimized for production
• Private keys are stored temporarily - use secure storage for production
• No authentication system - anyone can access the service
• Uploaded files are stored temporarily and should be cleaned periodically

pytest tests/ -v

• See CONTRIBUTING.md for contribution guidelines
• Follow Flask best practices
• Add tests for new functionality

• Research: Compare FAEST with classical signature schemes
• Education: Demonstrate post-quantum cryptography
• Prototyping: Test FAEST in document workflows
• Benchmarking: Measure signature sizes and performance

"Module not found: pyfaest"

pip install pyfaest

"Database not found"

python run.py init-db

"Permission denied" on uploads

chmod 755 uploads/

• PyFAEST - Python bindings for FAEST
• FAEST Specification
• NIST PQC Project

MIT License - See LICENSE file

Created for NYU Post-Quantum Cryptography Course (Fall 2025)

Built on top of PyFAEST and the FAEST reference implementation.