What I owned
I defined the service architecture from NIST guidance and physical QRNG constraints, evaluated C, Go, and Rust, and selected Rust based on measured engineering and performance trade-offs.
What I built
- Authenticated Axum/Tokio APIs with signed requests, nonces, replay protection, rate limiting, quotas, and freshness controls.
- Kyber/Dilithium post-quantum identity workflows through liboqs.
- Direct QRNG, hybrid CSPRNG, and parallel delivery modes with benchmark clients for latency and concurrency analysis.
- An eight-shard Rust entropy pool that reduced representative request latency from 3,053 to 2,615 microseconds at concurrency 10.
- Deployment workarounds around legacy Linux drivers, kernel compatibility, and physical PCIe hardware constraints.