CIPHER-MCP-PQC

Composite Identity, Protocol Handshake, and Evidence Repository
Hybrid post-quantum governance framework for Model Context Protocol infrastructure.

Accompanies the manuscript Composite Trust for Cognitive Workloads: Hybrid Post-Quantum Identity and Handshake Hardening for AI Agent Protocols (submitted for publication; not yet peer-reviewed).

Author: Sunil Gentyala, HCLTech | IEEE Senior Member 101760715 | ORCID 0009-0005-2642-3479

Repository Structure

cipher-mcp-pqc/
├── artifacts/
│   ├── A1-HHF-enforcer/          Layer 1: Hybrid Handshake Floor
│   │   ├── openssl-hybrid.conf   OpenSSL 3.5 config for X25519MLKEM768
│   │   └── hhf_monitor.py        TLS session compliance monitor + middlebox probe
│   ├── A2-CCRS-evaluator/        Layer 2: Composite Certificate Readiness Score
│   │   └── ccrs_score.py         Certificate chain evaluator (score 0-5)
│   ├── A3-composite-svid/        Layer 3: Composite SVID Policy (SPIFFE workaround)
│   │   └── composite_svid_gen.go ML-DSA-65 + ECDSA-P256 SVID generator (Go)
│   └── A4-HRSP-middleware/       Layer 4: Hybrid Result Signature Policy
│       └── hrsp_middleware.py    Detached ML-DSA-65 result signature verifier
├── benchmarks/
│   ├── harness/                  Go MCP stub server and bench client
│   └── results_raw.csv           50,000-run handshake benchmark dataset
├── CITATION.cff
├── LICENSE
└── README.md

CIPHER Framework Controls

Quick Start

A1: HHF Enforcer

# Check compliance from TLS session logs
pip install -r artifacts/A1-HHF-enforcer/requirements.txt
python artifacts/A1-HHF-enforcer/hhf_monitor.py \
    --log /var/log/mcp/tls.log \
    --probe mcp.example.com \
    --output report.json

A2: CCRS Evaluator

pip install cryptography pyopenssl
python artifacts/A2-CCRS-evaluator/ccrs_score.py \
    --host mcp.example.com --port 443

Output example:

CIPHER CCRS Evaluation
Host:        mcp.example.com:443
CCRS Score:  3 / 5
Rationale:   PQ intermediate detected. Parallel PKI deployment. Root remains quantum-vulnerable.
Chain depth: 3
Chain:
  [0] Leaf:         mcp.example.com (traditional)
  [1] Intermediate: Corp CA (ML-DSA-65)
  [2] Root:         Corp Root (traditional)

A3: Composite SVID Generator

go run artifacts/A3-composite-svid/composite_svid_gen.go \
    --spiffe-id spiffe://example.com/agent/research-agent \
    --output ./certs/ \
    --ttl 24h

Important: For production use, replace the ML-DSA-65 stub key generation
with liboqs-go (github.com/open-quantum-safe/liboqs-go). The stub uses
random bytes of the correct length (1,952-byte public key, 4,032-byte private
key per FIPS 204) to allow pipeline testing without CGO build requirements.

Identity binding: both the SPIRE-issued SVID and the composite certificate
must contain the same SPIFFE URI in the Subject Alternative Name extension.
The MCP server verifies both URIs match before accepting the credential pair.

A4: HRSP Middleware

pip install -r artifacts/A4-HRSP-middleware/requirements.txt

# Monitor mode (no enforcement, collect metrics)
python artifacts/A4-HRSP-middleware/hrsp_middleware.py \
    --mode monitor --port 8080 --upstream http://mcp-server:8000

# Prefer mode (flag unsigned, allow through with warning)
python artifacts/A4-HRSP-middleware/hrsp_middleware.py \
    --mode prefer --port 8080 --upstream http://mcp-server:8000

# Require mode (EXPERIMENTAL: unsigned results quarantined)
# Only use after draft-ietf-cose-dilithium-11 reaches RFC status
python artifacts/A4-HRSP-middleware/hrsp_middleware.py \
    --mode require --port 8080 --upstream http://mcp-server:8000

Standards Referenced

Citation

@software{gentyala2026cipher,
  author    = {Gentyala, Sunil},
  title     = {CIPHER-MCP-PQC: Hybrid Post-Quantum Governance for MCP},
  year      = {2026},
  version   = {v1.0.0},
  url       = {https://github.com/sunilgentyala/cipher-mcp-pqc},
  orcid     = {0009-0005-2642-3479}
}

@unpublished{gentyala2026composite,
  author    = {Gentyala, Sunil},
  title     = {Composite Trust for Cognitive Workloads: Hybrid Post-Quantum Identity
               and Handshake Hardening for {AI} Agent Protocols},
  year      = {2026},
  note      = {Manuscript submitted for publication}
}

License

MIT License. See LICENSE for details.