Skip to main content

QuantumLock™ Technical Datasheet

SoftQuantus QuantumLock - Technical Specifications​

Architecture Overview​

                                Internet
                                   │
                    ┌──────────────▼──────────────┐
                    │      QUANTUMLOCK API        │
                    │   License Generation &      │
                    │   Revocation Service        │
                    └──────────────┬──────────────┘
                                   │
        ┌──────────────────────────┼──────────────────────────┐
        │                          │                          │
        ▼                          ▼                          ▼
┌───────────────┐        ┌───────────────┐        ┌───────────────┐
│LICENSE SERVICE│        │QUANTUM ENGINE │        │EVIDENCE AUTH  │
│               │        │               │        │               │
│ Generate      │◄──────►│ 16-Qubit Sim  │◄──────►│ Bundle Gen    │
│ Validate      │        │ SHA3-512 Hash │        │ PQC Signing   │
│ Revoke        │        │ Entropy Pool  │        │ Compliance    │
└───────┬───────┘        └───────┬───────┘        └───────┬───────┘
        │                        │                        │
        └────────────────────────┼────────────────────────┘
                                 │
        ┌────────────────────────┼────────────────────────┐
        │                        │                        │
        ▼                        ▼                        ▼
┌───────────────┐        ┌───────────────┐        ┌───────────────┐
│ KEY MANAGEMENT│        │ AUDIT SERVICE │        │ ARTIFACT REG  │
│               │        │               │        │               │
│ ML-DSA Keys   │        │ Chain Hash    │        │ Build Hashes  │
│ Rotation      │        │ Event Log     │        │ Manifest      │
│ HSM Optional  │        │ SIEM Export   │        │ Verification  │
└───────────────┘        └───────────────┘        └───────────────┘
                                 │
                    ┌────────────┼────────────┐
                    │            │            │
                    ▼            ▼            ▼
              ┌──────────┐ ┌──────────┐ ┌──────────┐
              │PostgreSQL│ │  Redis   │ │  Blob    │
              │ Primary  │ │ Cache    │ │ Storage  │
              └──────────┘ └──────────┘ └──────────┘

Core Components​

SDK Runtime (quantumlock-sdk)​

SpecificationValue
LanguagePython 3.10+
Package Size~2MB (compiled)
DependenciesNone (standalone)
Memory Footprint~15MB
Startup Time< 5ms (offline validation)
ProtectionNuitka-compiled binary

CLI Tool (quantumlock-cli)​

SpecificationValue
LanguagePython 3.10+
Binary Size~8MB (Nuitka)
PlatformsLinux, macOS, Windows
Output FormatsJSON, YAML, Table
Shell CompletionsBash, Zsh, Fish

API Service (quantumlock-api)​

SpecificationValue
FrameworkFastAPI + Uvicorn
ArchitectureMicroservices, stateless
ScalingHorizontal, container-native
ContainerOCI-compliant (Docker)
Image Size~150MB
Memory Footprint~200MB base

Cryptographic Specifications​

Quantum Fingerprint Algorithm​

ParameterValue
NameQuantumFingerprint-16Q-SHA3-512
Qubits16 (simulated)
Hash FunctionSHA3-512
Signature Size256 bytes
Security Level256-bit equivalent

Signature Algorithms​

PurposeAlgorithmKey SizeStandard
License SigningEd25519256-bitRFC 8032
PQC SignaturesML-DSA-65Level 3FIPS 204
Evidence ProofsEd25519 + ML-DSA-65DualHybrid
Legacy SupportRSA-20482048PKCS#1

Hash Functions​

PurposeAlgorithmStandard
License HashSHA3-512FIPS 202
Chain HashSHA-256FIPS 180-4
Content DigestBLAKE3N/A

Entropy Sources​

PrioritySourceEntropy Rate
1Hardware RNG (RDRAND)High
2/dev/urandomMedium-High
3Quantum SimulationSupplementary

License Format​

License File Structure (.qlicense)​

{
  "version": "2.0",
  "license_id": "QL-2026-XXXX-YYYY-ZZZZ",
  "customer": {
    "id": "cust_abc123",
    "name": "Acme Corporation",
    "email": "license@acme.com"
  },
  "product": {
    "id": "prod_xyz789",
    "name": "MyApp Enterprise",
    "version_constraint": ">=2.0.0,<3.0.0"
  },
  "validity": {
    "issued_at": "2026-01-01T00:00:00Z",
    "expires_at": "2027-01-01T00:00:00Z",
    "grace_days": 7
  },
  "features": ["feature_a", "feature_b", "api_access"],
  "limits": {
    "max_users": 100,
    "max_machines": 5
  },
  "quantum_fingerprint": {
    "algorithm": "QuantumFingerprint-16Q-SHA3-512",
    "state_vector": "base64_encoded_quantum_state",
    "measurement_basis": "computational"
  },
  "signatures": {
    "ed25519": "base64_ed25519_signature",
    "ml_dsa_65": "base64_ml_dsa_signature"
  },
  "metadata": {
    "issuer": "SoftQuantus",
    "chain_hash": "abc123..."
  }
}

License Types​

TypeDescriptionUse Case
Time-BasedValid for N daysSubscription
PerpetualNo expirationOne-time purchase
Feature-BasedSpecific features enabledTiered products
Machine-LockedBound to hardwareEnterprise
FloatingN concurrent activationsTeam licenses

Validation Flow​

Offline Validation (< 5ms)​

┌─────────────────────────────────────────────────────────────┐
│                    OFFLINE VALIDATION                       │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│   1. LOAD LICENSE        2. VERIFY SIGNATURE    3. CHECK   │
│   ───────────────        ─────────────────      ─────────  │
│                                                             │
│   Read .qlicense ──►  Ed25519.verify() ──►  Expiry OK?     │
│   Parse JSON          Quantum fingerprint    Features OK?  │
│   Cache in memory     Hash verification      Machine OK?   │
│                                                             │
│   Result: VALID | INVALID | EXPIRED | REVOKED (cached)     │
│                                                             │
└─────────────────────────────────────────────────────────────┘

Online Sync (Background)​

┌─────────────────────────────────────────────────────────────┐
│                    BACKGROUND SYNC                          │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│   1. CHECK API           2. VERIFY STATUS      3. CACHE    │
│   ──────────            ──────────────         ─────────   │
│                                                             │
│   POST /v1/validate ──►  API validates ──►  Update local   │
│   license_id + hash      Returns status      revocation    │
│   (async, non-blocking)  + metadata          cache         │
│                                                             │
│   Frequency: Every 15 min (configurable)                   │
│   Timeout: 5 seconds (does not block app)                  │
│                                                             │
└─────────────────────────────────────────────────────────────┘

API Specifications​

REST API​

SpecificationValue
Base URLhttps://quantumlock.softquantus.com
FormatJSON
VersioningURL path (/v1/)
DocumentationOpenAPI 3.1
Rate Limiting1000 req/min per API key
AuthenticationX-API-Key header

Endpoints Summary​

MethodEndpointDescription
POST/v1/licenses/generateGenerate new license
POST/v1/licenses/validateValidate license online
POST/v1/licenses/{id}/revokeRevoke license
GET/v1/licenses/{id}Get license details
GET/v1/licensesList licenses
POST/v1/artifacts/registerRegister build artifact
GET/v1/artifacts/{hash}Verify artifact
GET/v1/evidence/bundlesList evidence bundles
POST/v1/evidence/generateGenerate compliance report
GET/healthHealth check

Response Codes​

CodeMeaning
200Success
201Created
400Bad Request (validation error)
401Unauthorized (invalid API key)
403Forbidden (license revoked)
404Not Found
429Rate Limited
500Server Error

Example: Generate License​

curl -X POST https://quantumlock.softquantus.com/v1/licenses/generate \
  -H "X-API-Key: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "customer_id": "cust_abc123",
    "product_id": "prod_xyz789",
    "features": ["feature_a", "feature_b"],
    "valid_days": 365,
    "max_machines": 5
  }'

SDK Specifications​

Python SDK​

# Installation
pip install quantumlock-sdk

# Basic Usage
from quantumlock.sdk import HybridLicenseValidator

validator = HybridLicenseValidator(
    license_path="license.qlicense",
    api_url="https://quantumlock.softquantus.com",
    api_key="your_api_key",  # Optional, for online sync
    sync_interval=900,  # 15 minutes
    grace_period_days=7
)

# Validate (offline-first)
result = validator.validate()

if result.valid:
    print(f"License valid until: {result.expires_at}")
    print(f"Features: {result.features}")
else:
    print(f"Invalid: {result.reason}")

SDK Methods​

MethodDescriptionReturns
validate()Validate licenseValidationResult
get_features()List enabled featuresList[str]
check_feature(name)Check specific featurebool
get_license_info()Get license metadataLicenseInfo
force_sync()Force online validationSyncResult

ValidationResult Fields​

FieldTypeDescription
validboolOverall validity
statusstr"active", "expired", "revoked"
reasonstrError reason if invalid
customerstrCustomer name
expires_atdatetimeExpiration date
featuresList[str]Enabled features
days_remainingintDays until expiration
in_grace_periodboolWithin grace period

Deployment Options​

AspectValue
Availability99.9% SLA
RegionsEU (West Europe), US (East)
Data ResidencyEU by default
BackupDaily, 30-day retention

On-Premise​

RequirementSpecification
Container RuntimeDocker 24+ or Kubernetes 1.28+
CPU2 vCPU minimum
Memory4GB minimum
Storage20GB SSD
DatabasePostgreSQL 15+
CacheRedis 7+

Hybrid​

ComponentLocation
License GenerationCloud (SaaS API)
ValidationLocal (SDK offline)
SyncBackground to cloud
EvidenceCloud storage

Performance Specifications​

Latency​

OperationTargetMeasured
Offline validation<10ms3-5ms
Online validation<200ms80ms
License generation<500ms150ms
Evidence bundle gen<2s800ms

Throughput​

MetricValue
Licenses generated/sec1,000+
Validations/sec (API)10,000+
Concurrent SDK instancesUnlimited

Security Specifications​

Transport Security​

LayerProtection
APITLS 1.3 only
SDK to APICertificate pinning
License filesEncrypted at rest

Key Management​

AspectSpecification
Key StorageAzure Key Vault / HSM
RotationEvery 90 days (configurable)
Algorithm MigrationCrypto-agility layer

Anti-Tampering​

ProtectionMethod
BinaryNuitka compilation
LicenseDual signature verification
RuntimeIntegrity checks

Compliance Alignment​

Frameworks Supported​

FrameworkRelevanceEvidence Type
NIS2Software supply chainArtifact registry
GDPRLicense data handlingData processing records
SOC2License audit trailEvidence bundles
ISO27001Security controlsCompliance reports

Evidence Generation​

  • Automated evidence collection
  • PQC-signed bundles (ML-DSA-65)
  • Chain hash integrity
  • Compliance coverage reports

Version Information​

ComponentVersion
QuantumLock Core2.1.1
SDK (Python)2.1.1
CLI2.1.1
API Versionv1
OpenAPI Spec3.1.0
Container Imagesqtprodacr.azurecr.io/sqt/quantumlock-api:2.1.1

© 2026 SoftQuantus innovative OÜ

Registry Code: 17048927 | VAT: EE102767458 Veskiposti tn 2-1002, Tallinn, 10138, Estonia