WebAuthn-sized PQC

SQIsign targets the constrained CTAP2 buffer where Dilithium and Falcon-1024 do not fit — with a live testbed at pqc.rustykey.me.

TypeScript-first APIs

One shared signature interface across FN-DSA, ML-DSA, SQIsign, and SLH-DSA — plus ML-KEM loaders for Node and browsers.

Vetted C → WASM

Cryptographic cores come from upstream C (mlkem-native, Falcon, SQIsign) compiled with Emscripten — not a from-scratch rewrite.