DISCOVER
Find cryptographic code and everything connected to it.
POST-QUANTUM MIGRATION FOR NODE.JS
Upgrade old cryptography safely.
Quantum Twin finds RSA signatures in your code, plans a move to NIST-standardized ML-DSA, creates two independent migrations with Codex, tests both, and gives you the verified result to review.
Built with Codex and GPT-5.6, guided and reviewed by humans.
- 01RepositoryYour Node.js code
- 02DiscoverFind RSA signatures
- 03PlanGPT-5.6 migration plan
- 04Build twiceTwo Codex builders
- 05VerifyThe same checks on both
- 06ReviewYou approve the winner
01
THE PROBLEM
Replacing cryptography is not one code change.
Security code can be spread across files, libraries, keys, tests, and services. Missing one dependency can break signing, verification, or compatibility.
- Signing codeWhere the signature is created
- Verification codeWhere the signature is used or verified
- KeysKey generation and storage
- TestsSuites that assume the old format
- Other servicesConsumers that already trust today's signature
02
WHY NOW
Migration must begin before Q-Day.
Q-Day is the point when a sufficiently capable quantum computer could break widely used public-key cryptography. The exact date is unknown, and large migrations can take years. NIST standardized the first post-quantum algorithms in 2024 and advises organizations to start planning now.
03
HOW IT WORKS
Discover → Explain → Build twice → Prove
EXPLAIN
GPT-5.6 creates a migration plan developers can understand.
BUILD TWICE
Two isolated Codex builders create independent solutions.
PROVE
The same repeatable checks test both and keep the verified result.
04
REAL PRODUCT PREVIEW
See a complete migration.
See Quantum Twin find RSA signatures, create two upgrades, test both, and return the verified result — in the recorded demo.
05
WHY TWO BUILDERS
Do not trust the first generated patch.
Quantum Twin gives the same migration plan to two independent Codex builders. Their work is tested separately, so one weak implementation does not become the only option.
Direct Cutover
Moves fully to ML-DSA-65. Lowest legacy exposure when nothing else still needs the old signature.
Compatibility Bridge
Adds ML-DSA-65 while keeping RSA for consumers that are frozen and cannot change yet.
Both builders receive the same approved plan but work independently. You see each one's real status, files, and test results in the demo.
06
VERIFICATION
The AI proposes. Repeatable tests decide.
Every candidate faces the same checks, run outside the code it is testing. A candidate is only chosen if it passes; if none pass, Quantum Twin refuses to pick one.
Build the app
The migrated code still compiles and installs.
Create a signature
New ML-DSA signing works on real data.
Verify a signature
The new signature is accepted by the verifier.
Run existing tests
The repository's own test suite still passes.
Check compatibility
Frozen RSA consumers still verify when required.
Repeat cleanly
The checks give the same result when run again.
07
BUILT WITH CODEX AND GPT-5.6
Human judgment. Machine execution.
HUMAN
- The idea and goals
- Product decisions
- Guidance and direction
- Reviewing every result
- Feedback and correction
CODEX AND GPT-5.6
- The working implementation
- Frontend and backend
- Cryptography detector
- Two migration builders
- The verifier and tests
- Documentation
08
SUPPORTED CAPABILITIES
The strongest path, fully proven.
RSA signing and verificationFULLY SUPPORTED
- Runtime
- Node.js crypto
- Migration
- ML-DSA-65
- DetectorSupported
- AdapterSupported
- VerifierSupported
- WindowsSupported
- UbuntuSupported
Experimental and discovery-only boundaries are listed honestly on the full support matrix — never dressed up as more than they are.
09
RUN IT ON YOUR OWN CODE
The demo uses a sample. The workspace uses yours.
This site and the guided demo run on a prepared repository. To analyze your own Node.js code, run the local Migration Workspace — a developer console that imports your repositories, shows what the detector found, and runs the tournament only after you approve.
- Install Node.js 24 and authenticate Codex once:
codex login. - Clone and start the workspace:
git clone https://github.com/Shivansh3532/quantum-twin.git cd quantum-twin npx --yes pnpm@11.9.0 install --frozen-lockfile npx --yes pnpm@11.9.0 app
The command builds when needed, starts the app on a local 127.0.0.1 port, and opens it. Full setup and platform notes: README.