KA Libraries are Kasteon's embedded-first, modular building blocks for secure networking—engineered to run on constrained microcontrollers (STM32), then extended, from the same codebase, up through full desktop and server operating systems (Linux, macOS, Windows). Available for direct integration into your own products.
Discuss integrationKA Libraries are built embedded-first—designed from the ground up for constrained, resource-limited targets—and extend, from the same codebase, up through full desktop and server operating systems. All platform-specific functionality is fully abstracted within the libraries (via KA-Core's platform support layer), so products built on top of them—including SecureAccess itself—contain no platform-specific code of their own. The only platform dependency at the application layer is the build environment.
Most embedded-grade IPsec/PQC implementations stay embedded—constrained, narrow-purpose, hard to extend beyond the MCU they were written for. KA Libraries start from that same constrained-hardware discipline but don't stop there—the identical codebase scales up to full desktop and server platforms without a rewrite. That's the harder direction to build in, and the reverse of how most desktop-first security stacks get "ported down" to embedded, typically shedding features, hardening, or performance along the way.
Each KA library can be integrated on its own or as part of the full stack. All are the same components used by Kasteon SecureAccess. Capability details below are drawn directly from a source-level audit of the codebase, including what's implemented, what specifications each feature traces to, and known gaps — not marketing summaries.
Foundational runtime services—memory allocation, error handling, logging, and the platform support layer—underlying every other KA library.
malloc), with optional allocation metrics and a persistent vs. per-tick allocation lifetime model.Post-quantum and classical cryptographic primitives: AES, SHA-2/SHA-3, HMAC/HKDF, RSA, ECDSA, ECDH, X25519/X448, and ML-KEM-768 (FIPS 203).
Core networking stack: ARP/NDP, ICMP, IPv4/IPv6, TCP, UDP, DHCP, and GRE. The most actively developed component, providing the networking foundation that KA-IPsec and other components build on.
An IKEv2 + ESP implementation with hybrid post-quantum key exchange. The initiator role is mature and interop-demonstrated against strongSwan; the responder role currently covers session establishment but not the full exchange set.
Certificate parsing and chain validation (DER/ASN.1), currently exercised indirectly through KA-IPsec's certificate-authentication interop testing.
TLS 1.3/DTLS 1.3 support, with QUIC to follow. On the roadmap as the next addition to the KA Libraries family—not yet started.
If you're building your own gateway, radio, or ruggedized device and need standards-based, post-quantum-ready secure networking without maintaining separate embedded and desktop codebases, KA Libraries are built for exactly that integration path.