PostQuantum.Hybrid — VS Code Snippets

C# snippets for the PostQuantum.Hybrid library — hybrid post-quantum cryptography (X25519 + ML-KEM-768 for KEM, Ed25519 + ML-DSA-65 for signatures) on .NET 8 and .NET 10 — and for the PostQuantum.FileEncryption family (fail-closed file/stream encryption, passphrase-protected key files, detached signing, DI, KMS envelopes).

Every snippet follows the secure patterns the libraries' Roslyn analyzers enforce — PQH001 – PQH005 (PostQuantum.Hybrid.Analyzers) and PQFE101 – PQFE104 (PostQuantum.FileEncryption.Analyzers) — so the generated code is analyzer-clean and secure by default.

This version focuses on the repo's safest default surfaces first: Envelopes for application code, AspNetCore DI/rotation for services, and readiness-friendly patterns for production hardening.

Features

Provides IntelliSense snippets for C# files to accelerate working with the PostQuantum.Hybrid cryptography library.

Recommended starting points:

• pqh-envelope for anonymous seal/open flows.
• pqh-envelope-signed for authenticated confidentiality.
• pqh-aspnet-config for production-style ASP.NET Core registration.
• pqh-aspnet-rotate when you need zero-downtime KEM key rotation.

PostQuantum.FileEncryption (pqfe-*)

Snippets for the file-encryption family, aligned with its cookbook and anti-patterns docs:

Why These Snippets First?

• Envelope snippets are the safest default. They collapse KEM + HKDF + AEAD into one misuse-resistant API.
• ASP.NET snippets reflect real deployment patterns. Configuration-based registration and rotating KEM keys are more useful to service authors than only demo-style inline PEM wiring.
• Readiness matters in production. A snippet that exercises real crypto at startup is far more useful than a static support probe.

Requirements

The snippets emit code that depends on the NuGet packages — install them in your project or they will not compile:

# For the pqh-* snippets:
dotnet add package PostQuantum.Hybrid
dotnet add package PostQuantum.Hybrid.Analyzers      # strongly recommended
dotnet add package PostQuantum.Hybrid.Envelopes      # for Seal/Open helpers
dotnet add package PostQuantum.Hybrid.AspNetCore     # for the ASP.NET Core wiring

# For the pqfe-* snippets:
dotnet add package PostQuantum.FileEncryption
dotnet add package PostQuantum.FileEncryption.Analyzers   # strongly recommended
dotnet add package PostQuantum.FileEncryption.Hybrid      # recipient encryption
dotnet add package PostQuantum.FileEncryption.Signing     # detached signatures
dotnet add package PostQuantum.FileEncryption.Extensions.DependencyInjection

Known Issues

See the main repository's KNOWN-GAPS.md for current library limitations.

Release Notes

See CHANGELOG.md for detailed release notes.

1.2.0

• Added the pqfe-* snippet family for the PostQuantum.FileEncryption NuGet family: fail-closed file encryption, untrusted-input limits, PQKF key files, detached signing, DI registration, streaming upload encryption, and KMS envelopes.
• Every pqfe-* snippet is analyzer-clean against PostQuantum.FileEncryption.Analyzers (PQFE101 – PQFE104) and mirrors that repo's cookbook recipes.

1.1.0

• Added Envelopes, ASP.NET Core configuration/rotation, and readiness-check snippets.
• Repositioned the snippet set around the safest high-level APIs first.
• Tightened packaging/docs consistency for Marketplace publishing.

1.0.1

• Marketplace polish release with icon, listing metadata, and packaging updates.

1.0.0

• Initial release of C# snippets for PostQuantum.Hybrid.

To God be the glory — 1 Corinthians 10:31.