ET EigenTunnel

Core for testing hybrid PQC. Cloud for enterprise protection across the network.

Find risky crypto. Protect unpatchable paths. Connect when the network will not cooperate.

EigenTunnel Core is the free overlay: cloak enrolled nodes and protect data in flight with hybrid post-quantum crypto. EigenTunnel Cloud adds enrollment, CBOM evidence, managed rendezvous, and optional outbound-only gateway relay.

Install Core GitHub org Talk to Eigen Systems

Two layers. One security foundation.

Core must remain useful and secure when Cloud is absent.

EigenTunnel Core

Free hybrid-PQC overlay. Self-managed nodes, peer trust, cloaking, local status. AGPL v3. Rust.

EigenTunnel Cloud

Paid plane: enrollment, approvals, CBOM evidence, rendezvous, optional relay, fleet dashboards.

Protect traffic with a long shelf life.

Harvest-now-decrypt-later is the primary threat model.

Hybrid tunnels

X25519 + ML-KEM-768 (FIPS 203). AES-256-GCM or ChaCha20-Poly1305 bulk.

Mutual auth

ML-DSA-65 (FIPS 204). No session unless the peer proves a registered identity.

Agility

Parameter sets can move with standards. Forward secrecy per session.

Connect when the network will not cooperate.

Direct: Node A -> EigenTunnel overlay -> Node B
Relay:  Node A --outbound only--> gateway <--outbound only-- Node B

Gateway accepts leaf sessions only. It never dials your phone, Starlink home, or hotel laptop.

Install on macOS

Confirm the current installer in eigentunnel-core before running it on a production Mac.

# Expected success line after a clean local setup:
EigenTunnel install result: PASS
Alpha — not independently audited. Do not use for classified or life-safety data yet.

Eigen Systems

This product was previously marketed as FreeQ. The overlay did not change. The name did, after a collision with unrelated FreeQ products.