Post-Quantum Secure · In-Process FHE · Zero Network Overhead

The Only Video Infrastructure
with Homomorphic Encryption

RustTURN is an enterprise TURN/STUN/SFU server with 5 in-process H33 post-quantum crypto services. Encrypted session state, ZK frame integrity proofs, and homomorphic billing — all at microsecond latency.

Start Building View Architecture

1.595M

Auth/sec (single node)

0.085µs

ZKP verify (cached)

4,131x

Faster than SEAL

119

API Endpoints

In-Process Crypto Services

Five Post-Quantum Microservices. One Binary.

Every service runs in-process via Cargo workspace dependency. Zero TCP overhead. Direct function calls into H33 crypto primitives — the same pattern that gave us 44x over Redis.

🔐

PQ Credential Service

Dilithium-signed, ZKP-verified TURN credentials. The relay learns valid credential, quota, expiry — nothing else. No PII in the credential.

Issue: 244µs · Verify: 0.085µs cached

🎬

Frame Integrity

ZK-STARK proofs on every video keyframe. Chain-linked proofs create an unforgeable audit trail that video was not tampered in transit.

Prove: 2.0µs · Verify: 0.2µs · 1.25M streams

🔒

Encrypted Session State

BFV FHE-encrypted participant metadata. A rogue sysadmin cannot dump state and see who is on a call with whom. Structural HIPAA guarantee.

Write: 0.42ms · Auth check: 0.26ms

💰

Homomorphic Billing

Usage counters accumulated via FHE addition without decrypting. Tenants verify their own bill by decrypting with their private key.

Accumulate: <1µs · 1.595M updates/sec

📝

Encrypted Transcript

AI transcript words encrypted via BFV before storage. Threshold decrypt (3-of-5) required at LLM input. Every decrypt creates an audit trail.

Encrypt 25 words: 0.42ms · 0.084% STT overhead

System Architecture

In-Process. Not a Sidecar.

H33 crypto primitives link directly into the TURN server binary via Cargo workspace. No Docker containers, no gRPC, no serialization. The same architecture that eliminated the TCP Cachee bottleneck (136K → 1.595M auth/sec).

Client

WebRTC/TURN

→

RustTURN

UDP Relay

SO_REUSEPORT sharding

→

H33 Crypto

In-Process

BFV + Dilithium + ZKP

→

REST API

119 Endpoints

axum + tower

Rustv100-turn/src/main.rs

// H33 services initialize once at startup, share crypto context via Arc
let h33_ctx = Arc::new(h33::H33CryptoContext::new()?);
let h33_services = Arc::new(h33::H33Services::new(h33_ctx));

// All 5 services are direct function calls — zero network overhead
let cred = h33.credential.issue_credential(claim, ttl, quota)?;    // 244µs
let valid = h33.credential.verify_credential(&cred);              // 0.085µs
let proof = h33.frame_integrity.prove_keyframe(ssrc, seq, ts, tag)?; // 2.0µs
h33.billing.record_bytes(&tenant_hash, bytes_kb);                  // <1µs FHE add

Competitive Analysis

What the Competition Cannot Do

Every other video infrastructure provider stores session metadata, billing data, and transcripts in plaintext. A single breach exposes everything.

Capability	H33 + RustTURN	Twilio	AWS Chime	Vonage
Post-quantum signatures	ML-DSA-65	No	No	No
FHE-encrypted session state	BFV (N=4096)	No	No	No
ZK frame integrity proofs	ZK-STARK	No	No	No
Encrypted billing counters	FHE addition	Plaintext	Plaintext	Plaintext
Transcript encryption	BFV + threshold	Plaintext	Plaintext	Plaintext
Auth throughput (single node)	1,595,071/sec	N/A (SaaS)	N/A (SaaS)	N/A (SaaS)
Credential verification	0.085µs	~50ms (API)	~100ms (API)	~75ms (API)

Pricing

Start Free. Scale to Enterprise.

H33 post-quantum services are add-ons to your RustTURN plan. Standard tier included at no additional cost.

Standard

$0/mo

Included with any RustTURN plan. Post-quantum credentials and frame integrity.

10K PQ credentials/month
100K frame proofs/month
ZK-STARK verification
Dilithium signatures
Encrypted session state
Homomorphic billing
Encrypted transcripts

Get Started

Business

$299/mo

Full PQ credentials + FHE-encrypted sessions + homomorphic billing proofs.

100K PQ credentials/month
1M frame proofs/month
10K FHE operations/month
Encrypted session state
Homomorphic billing
99.9% SLA
Encrypted transcripts

Start Trial

HIPAA

$999/mo

Everything in Business + encrypted transcripts + compliance audit trails.

500K PQ credentials/month
5M frame proofs/month
100K FHE operations/month
50K transcript operations/month
Compliance audit trail
Threshold decrypt (3-of-5)
99.95% SLA

Contact Sales

Enterprise

Custom

Unlimited everything. Dedicated key ceremony. Custom SLA with credits.

Unlimited PQ credentials
Unlimited frame proofs
Unlimited FHE operations
Unlimited transcripts
Dedicated key ceremony
On-prem deployment option
99.99% SLA with credits

Talk to Us

Developer Experience

One API Call. Full Post-Quantum.

curlIssue a PQ Credential

curl -X POST https://api.h33.ai/api/v1/h33/credentials/issue \
  -H "Authorization: Bearer rt_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "identity_claim": "user_abc123",
    "ttl_seconds": 300,
    "bandwidth_quota": 1000000
  }'

# Response (201 Created)
{
  "credential_id": "a1b2c3...64hex",
  "credential_b64": "eyJ...",
  "expires_at": 1709568000,
  "signature_algorithm": "ML-DSA-65 (Dilithium3)",
  "proof_system": "ZK-STARK Lookup"
}

curlRecord Encrypted Billing

curl -X POST https://api.h33.ai/api/v1/h33/billing/record \
  -H "Authorization: Bearer rt_live_..." \
  -d '{
    "tenant_hash": "f4e5d6...64hex",
    "bytes_kb": 2500,
    "minutes": 5,
    "allocations": 1
  }'

# Response — usage accumulated via FHE addition, no decryption occurred
{
  "recorded": true,
  "operations": 3,
  "note": "Usage accumulated via FHE addition - no decryption occurred"
}