Skip to content

About AnkaSecure API

Introduction

AnkaSecure is a crypto-agility orchestration layer: the policy engine, key lifecycle manager, audit trail and migration tooling around your cryptography. It is not a cryptographic module. The cryptographic primitives are FIPS-approved (FIPS 197 AES, FIPS 186-5 RSA/ECDSA, FIPS 203 ML-KEM, FIPS 204 ML-DSA, FIPS 205 SLH-DSA), and module-level FIPS 140-2/140-3 coverage is provided by the HSM the customer already deploys (Thales Luna, AWS CloudHSM, Entrust nShield).

What AnkaSecure adds on top: a control plane that lets organizations transition to post-quantum cryptography (PQC) while preserving compatibility with existing cryptographic systems, change algorithms via policy in seconds without application changes, and operate a tamper-evident audit trail across encryption, signing and migration workflows.

Key Features

AnkaSecure API enables enterprises, governments, and security-conscious organizations to integrate quantum-resilient cryptography into their infrastructure with minimal disruption. The core features include:

1. Post-Quantum Cryptography (PQC) Support

  • Implements NIST-standardized PQC algorithms:
  • ML-KEM – Secure key exchange and encryption.
  • ML-DSA – High-performance lattice-based digital signatures.
  • FALCON – Optimized for compact, high-speed signatures.

  • SLH-DSA – Hash-based digital signatures for long-term security.

  • Supports hybrid cryptographic models (RSA + ML-KEM, ECC + ML-DSA) to enable smooth migration.

2. Secure Key Management

  • Key generation, import/export, storage, and rotation. Designed to support integration with enterprise key management solutions.
  • Designed for integration with classical and PQC key storage solutions, including AWS KMS, Azure Key Vault, HashiCorp Vault, and HSMs.
  • On-demand re-encryption and re-signing of existing data from RSA/ECC to PQC without requiring re-uploading.

3. API-Centric Design with Beautiful APIs

  • RESTful API adhering to Beautiful APIs principles, ensuring clarity, consistency, and usability.
  • Well-structured OpenAPI documentation with clear request/response models.
  • Non-streaming and streaming endpoints for efficient processing of large datasets.

4. Secure Digital Signatures & Encryption

  • Asymmetric encryption using ML-KEM for quantum-safe secure communication.
  • Digital signatures via ML-DSA, FALCON, and SLH-DSA.
  • Re-signing capabilities to upgrade legacy signatures to post-quantum standards.

5. Authentication & Access Control

  • JWT-based authentication for users and applications.
  • Role-based access control (RBAC) to manage cryptographic operations securely.
  • Secure API endpoints with TLS 1.3 encryption to prevent data interception.

6. Enterprise-Grade Integration & Deployment Flexibility

  • SaaS (Cloud): Fully managed, scalable, and continuously updated.
  • On-Premise / Private Cloud: Deploy within enterprise environments with full control over cryptographic keys.
  • Hybrid Deployment: Combine on-premise control with cloud-based cryptographic services.
  • Observability & Monitoring: Built-in support for observability tools like DataDog, Dynatrace, and Grafana via Prometheus.
  • Integration-ready for security event correlation, enabling log forwarding to systems like Splunk, ArcSight, and Elastic for deeper security analysis.

7. Compliance & Security

  • Implements NIST PQC standardized algorithms (FIPS 203/204/205) and orchestrates FIPS-approved primitives (FIPS 197 AES, FIPS 186-5 RSA/ECDSA).
  • Module-level FIPS 140-2/140-3 coverage is provided by the customer-deployed HSM.
  • Aligned with GDPR data-protection requirements through multi-tenant isolation and configurable key lifecycle.
  • Detailed logging and auditing for security monitoring and compliance.
  • Tamper-evident record of cryptographic and administrative operations: each audit record is signed, and each stored record is chained to the one before it, so alteration, deletion or reordering is detectable on verification.

How AnkaSecure API Works

1. Secure Key Exchange & Encryption

  1. Generate an ML-KEM key pair.
  2. Exchange and encrypt data securely using post-quantum encryption.
  3. Store and manage cryptographic keys via API endpoints.

2. Digital Signature Workflow

  1. Generate a key pair for ML-DSA, FALCON, or SLH-DSA.
  2. Sign documents or transactions.
  3. Verify authenticity using quantum-resistant signature verification.

3. Hybrid Cryptographic Transition

  1. Re-encrypt RSA/ECC data using ML-KEM.
  2. Re-sign existing documents with ML-DSA or FALCON.
  3. Maintain interoperability between legacy and quantum-resistant systems.

Why Choose AnkaSecure API?

  • Future-Proof Cryptography: Adopt PQC without disrupting current workflows.
  • Enterprise-Grade Security: Secure, scalable, and compliant with industry standards.
  • Easy Integration: Well-documented API, SDKs, and CLI tools for rapid adoption.
  • Flexible Deployment: SaaS, on-premise, or hybrid, tailored to enterprise needs.

Conclusion

AnkaSecure API is a powerful, enterprise-ready solution for securing cryptographic workflows in the post-quantum era. By integrating ML-KEM, ML-DSA, FALCON, and SLH-DSA, organizations can confidently transition to quantum-resilient security models. With its flexible deployment options, seamless hybrid support, and well-structured API, AnkaSecure is the ideal choice for businesses and governments looking to protect sensitive data against future threats.

For a deeper dive into how AnkaSecure API works, explore the Architecture Overview.