TraplessPKE — A New Direction for Post-Quantum Cryptography

Wai Yip, WONG — Tue, 05 Aug 2025 09:34:32 +0000

🚀 TraplessPKE — A New Direction for Post-Quantum Cryptography

How I designed a cryptographic system that abandons algebraic structure and survives quantum attacks

🔗 [GitHub] | 🧾 [Whitepaper] | 👨‍💻 Author: Wai Yip, WONG (github.com/waiyip000)

❓ What Is TraplessPKE?

TraplessPKE is a quantum-safe cryptographic system I designed to achieve:

✅ Public-Key Encryption
✅ Message-Bound Digital Signatures
✅ Zero reliance on lattices, primes, elliptic curves, or algebraic traps
✅ Compatibility with hardware and embedded systems
✅ Epistemic defense: validation is impossible without a secret — not just hard

🧠 What Makes It Different?

Unlike NIST-style PQC schemes based on algebraic hardness (like LWE, lattices, or codes), TraplessPKE is:

A structure-free cryptographic scheme based on entropy, filtering, and deliberate ambiguity.

Core principle:

You cannot break what you cannot recognize.
There is no structure to invert. No equations to solve. Only filtered meaning for those with the key.

🔐 How It Works (Simplified)

TraplessPKE uses:

A Selector Map — links messages and ciphertexts via a common label space
A Public Predicate — filters plausible ciphertexts
A Trapdoor — blinds inputs via XOR masking
A Hash-Bound Signature — cryptographically binds message + trapdoor

All operations are constant-time and linear-space.

No discrete logs. No modular arithmetic. No vectors.

📐 Use Cases

Post-Quantum Secure Messaging
Digital Signatures that can’t be reused or transferred
Identity-bound credentials (ZK-friendly)
Hardware authentication in constrained devices
Defense systems where no cryptographic oracle or structure must exist

💡 Why I Built It

After two decades in banking risk and compliance, I saw firsthand how security often depends on assumptions that attackers eventually break. Quantum computing accelerates that collapse.

TraplessPKE is my answer:
A non-invertible surface designed to survive even when quantum attackers arrive — because there’s no algebra to attack.

📘 Want to Learn More?

🔗 Full Whitepaper: TraplessPKE_whitepaper_V1.0.pdf
📦 GitHub Repo: github.com/waiyip000/traplesspke

💬 Your Thoughts?

I’d love your feedback — questions, critiques, or use-case ideas.

“Security through ambiguity. Access through design. Meaning for those who are allowed.”
— TraplessPKE, 2025

Launching ANCP — Secure Login for AI Agents Without VPN or OAuth

Wai Yip, WONG — Sun, 20 Jul 2025 22:12:41 +0000

🚀 Launching ANCP — Secure Login for AI Agents Without VPN or OAuth

AI agents are evolving from tools into autonomous reasoning actors — capable of reading, writing, and acting on sensitive data. But today’s authentication systems were built for humans with browsers, not intelligent agents with goals.

That’s why I’m launching ANCP — the Agent-Native Challenge Protocol.

It’s a new kind of login protocol built specifically for LLMs like ChatGPT, Gemini, Claude, and future autonomous agents.

🔐 What Makes ANCP Different?

ANCP lets an AI agent authenticate and access backend infrastructure without:

❌ VPN tunnels
❌ OAuth 2.0 or browser redirects
❌ Static API keys
❌ Service accounts or secret-sharing

Instead, it uses:

✅ PGP-based challenge–response login
✅ Zero-trust, stateless session negotiation
✅ AI-readable .well-known/ancp.discovery.json endpoint metadata
✅ Prompt-native reasoning over identity

🧠 Why It Matters

Today’s LLMs are capable of:

Making API calls
Generating SQL queries
Accessing CRMs or HR systems
Recommending product launches, policy decisions, or financial strategies

But if the only login method available is:

“Paste this OAuth token in a browser...”
…the agent becomes blocked or dangerously over-permissioned.

ANCP makes identity a reasoning-aligned interaction.

The agent proves it understands what it's doing — cryptographically and semantically.

📦 GitHub Repository

👉 https://github.com/waiyip000/agent-native-auth

Includes:

Full whitepaper (whitepaper.docx)
SHA256 validation hash
.well-known/ancp.discovery.json sample
PGP digest tool (digest.py)
Attribution-secured LICENSE

📄 Whitepaper SHA256 Digest

To verify authorship and originality of the protocol:

SHA256 (whitepaper.docx):
407f2e29bc6ba9bb8710cd43da58401d056bd1d1cb7c0dadeb6729a99a9c4c36

🧑‍💻 Created and authored by

Wai Yip, WONG

🔗 LinkedIn

💻 GitHub

📣 Call to Action

I’m inviting:

OSS contributors
LLM security architects
AI infra developers
Zero-trust security teams

…to collaborate, test, and build on ANCP.

Let's make secure, intelligent infrastructure agent-native.

ANCP #LLM #AI #ZeroTrust #Security #Authentication #PGP #PromptNative #OpenSource

Forem: Wai Yip, WONG

TraplessPKE — A New Direction for Post-Quantum Cryptography