Blog posts, press releases, product announcements, and articles from the Quantum River team.
In partnership with UTSI, Quantum River is opening waitlist access to an entropy-as-a-service platform that replaces algorithmically generated randomness with entropy derived from quantum photonic hardware. Targets security teams, blockchain protocols, and digital platforms preparing for the post-quantum era.
Cryptography has two layers. The algorithm determines what math an attacker must break. The randomness determines whether the math is actually hard. When randomness fails, the algorithm fails with it — and almost every cryptographic system in production depends on entropy in more places than most operators realize.
Quantum Cryptographic Primitive (QCP) is now available for select partners. Verifiable quantum entropy delivered via REST API, on-chain feeds, and standards-based integrations (PKCS#11, KMIP) for regulated enterprise environments.
QVRF is a reference implementation showing how quantum entropy can be mixed into a VRF-style pipeline without compromising verifiability or speed. Benchmarks show sub-second fulfillment.
Profanity (2022) drained $160M from Wintermute via a 32-bit PRNG seed. Milk Sad (2023) emptied $3.4M from wallets generated with a Mersenne Twister. Trust Wallet fell back to MT19937 in WASM. Each incident traces to the same root cause: weak randomness, in key generation or in signing nonces.
NIST finalized ML-DSA, ML-KEM, and SLH-DSA in 2024. Each resists Shor’s algorithm — but none escapes the requirement for high-quality randomness. ML-DSA’s hedged signing inherits the same dependency that made ECDSA nonce bugs catastrophic, and FIPS 203 dropped Kyber’s hashing of encapsulation randomness, so ML-KEM relies directly on the RNG’s quality. The algorithm layer is standardized; the entropy layer isn’t.
Post-quantum migration secures the algorithm layer. It does not secure the randomness feeding those algorithms. The strongest post-quantum algorithm instantiated with a compromised random source remains broken. Quantum River positions as the entropy layer underneath any cryptographic system.
The case for quantum entropy is not hypothetical Q-Day. It is present-day failure: seed compromise, state cloning, entropy pool depletion, and side-channel correlation are all happening now. Quantum-measured randomness has no hidden state, no seed, and no algorithm to compromise.