zenthracore/zen.redis repository overview

⁠zen.redis

🧘 Alpine-based Redis image with OpenSSL 3.3.4, Falcon post-quantum crypto, and oqs-provider.
Silence is infrastructure.

⁠🔐 What is this?

zen.redis is a minimal Alpine Linux container featuring:

• Redis 8.0-rc1 (built from source)
• OpenSSL 3.3.4 (built July 2025, with full provider support)
• Integrated oqs-provider⁠ for OpenSSL 3.x
• Post-quantum algorithm: Falcon512 / Falcon1024 from NIST PQC standards⁠
• Working openssl.cnf with dynamic provider loading
• Ready for post-quantum mTLS (TLS using Falcon keys)
• Built-in redis-cli, openssl, and all standard tools

⁠🧰 Use cases

• 🛡️ Running Redis with post-quantum TLS (Falcon certs)
• 🧪 Testing PQC and mTLS endpoints (Redis, NGINX, etc.) in containers
• ⚙️ Base image for hardened, post-quantum microservices
• 📦 CI/CD or security labs requiring PQ-crypto in Redis flows
• 🔭 Research and validation of PQC in cloud-native stacks

⁠⚙️ Quick start

⁠🧘 1. Run the container shell

docker run -it --rm zenthracore/zen.redis sh

⁠🔐 2. Generate Falcon key and cert inside the container

# Generate Falcon1024 private key
openssl genpkey -algorithm falcon1024 -out server.key

# Generate CSR
openssl req -new -key server.key -out server.csr \
-subj "/C=UA/ST=Kyiv/L=Kyiv/O=ZENTHRACORE/CN=api.example.com"

# Self-sign certificate
openssl x509 -req -in server.csr -signkey server.key -out server.crt -days 365

⁠🚀 3. Start Redis with PQ TLS

redis-server --tls-port 6379 --port 0 \
--tls-cert-file /data/server.crt \
--tls-key-file /data/server.key \
--tls-ca-cert-file /data/server.crt \
--tls-protocols "TLSv1.3"

⁠🔗 4. Connect with redis-cli using PQ TLS

⁠Open a second terminal into the same container:

docker exec -it <container_id_or_name> sh

⁠And run:

redis-cli --tls \
--cert /data/server.crt \
--key /data/server.key \
--cacert /data/server.crt \
-p 6379

⁠You should see:

127.0.0.1:6379> ping
PONG

⁠🧪 Provider check

openssl version
openssl list -providers
openssl list -public-key-algorithms

⁠🛠️ Extras

• Redis modules: Bloom, TimeSeries, Search, ReJSON included (check your build for details)
• Non-root container user by default (redis:redis)
• Can be used as a base image for secure, post-quantum Redis services

⁠📄 License

• Redis: BSD-3-Clause
• Falcon: MIT
• oqs-provider: Apache-2.0 + BSD-compatible
• OpenSSL 3.3.4: Apache 2.0
• Everything in this repo: MIT

⁠🧘 About ZENTHRACORE

Silence is infrastructure.
ZENTHRACORE is a minimal, security-first stack for post-quantum, zero-trust, hardened systems. zen.redis is its cryptographic + data foundation.

⁠📫 Contact

• 📧 Email: [email protected]⁠
• ⚡ Damus (Nostr): npub1msz8ejzagf5z760c74d6svrpmqcd3nq6ffhrq7akesege9dq748sjlul4s