Timing-safe, post-quantum, constant-time cryptographic virtual machine in pure PHP

View on GitHub

What is ULTRA?

Pure-PHP cryptographic virtual machine

No C extensions required, runs in any PHP 8.3+ environment

Timing-safe, constant-time primitives

Side-channel resistant by design, no data-dependent branches

Quantum-resistant key exchange

Post-quantum cryptography ready with Kyber/Dilithium integration

Deterministic HMAC-IV pipeline

No random oracle dependencies, fully reproducible

Secure encrypted container format

ULTRA2 container protection with integrity verification

Anti-dump memory isolation via FFI

Runtime memory protection against process inspection

Research Status

Submitted for USENIX / Black Hat review. Formal verification in progress.

Open zero-knowledge benchmark for public validation.

"We're preparing to write history - transparent, reproducible, open."

Open Source

Loader (open source)

MIT-licensed core loader for ULTRA containers

Benchmark Docker (reproducible)

Complete Docker setup for independent verification

Zero-knowledge proof test suite

Comprehensive test suite for cryptographic verification

Zero-Knowledge Benchmark

Test ULTRA's performance locally without access to the source code. Fully transparent: zero-knowledge encrypted container.

docker run --rm phpnext/ultra-bench

Copy and run this command in your terminal to verify independently. No source code required, no keys exposed.

Development Roadmap

  • ?
    ULTRA v2 build

    Core architecture completed and production-ready

  • 2
    Hybrid post-quantum mode

    Kyber/Dilithium integration for quantum resistance

  • 3
    Deterministic pipeline verifier

    Formal proof system for cryptographic operations

  • 4
    ULTRA HW dongle

    Hardware seed mode for enhanced security

  • 5
    Full commercial edition

    Enterprise features and support