{"rewrite":{"id":"r_bc93e22f23297391fb444a14","clusterId":"c_60d615630c5e2a70a35b9380","slug":"orcarouter-encrypts-request-logs-with-post-quantum-cryptography-at-no-extra-cost","model":"deepseek-v4-1-flash","headline":"OrcaRouter Encrypts Request Logs With Post-Quantum Cryptography at No Extra Cost","summary":"FlashLabs says its Japanese-market AI inference gateway OrcaRouter now encrypts the body of request logs with post-quantum cryptography as standard, with no opt-in and no extra charge, and not limited to the Enterprise plan. The companion implementation, scuttle, was released as open source under the Apache-2.0 license. The stated threat is harvest now, decrypt later.","whyItMatters":"Encrypting request log bodies before storage means a leaked database replica, snapshot, or backup yields ciphertext rather than prompts and credentials, which is the point of naming the harvest now, decrypt later threat explicitly.","webCardHtml":"\u003cp\u003eLog bodies are encrypted before they are written to storage, so a leaked replica, snapshot, or backup does not expose their contents. Data encryption uses AES-256-GCM with a separate key generated for each item, and long-term stored keys are protected by a hybrid of post-quantum ML-KEM-768 and the existing X25519. The application that writes logs receives only a public capture key that can encrypt new logs but cannot use that key to decrypt past logs.\u003c/p\u003e\u003cp\u003eThe encryption layer scuttle was released as open source under the Apache-2.0 license, with its code, specification, threat model, attack surface, and fuzzing targets public. FlashLabs says nine types of automated fuzzing tests ran tens of millions of executions before release and that the two defects found were fixed before release. Two internal reviews took place; no third-party audit has been conducted. Reports are accepted via GitHub\u0026#39;s private channel and email.\u003c/p\u003e","blueskyPost":"OrcaRouter ships scuttle under Apache-2.0. Anyone can read how the log encryption works, which is a different trust model than asking users to take FlashLabs' word for it.","twitterPost":"OrcaRouter open-sources scuttle under Apache-2.0, so the log encryption is inspectable code, not a vendor promise.","threadsPost":"OrcaRouter defaults every request log to post-quantum encryption and puts the scuttle implementation on Apache-2.0. Publishing the code lets outsiders verify the scheme instead of trusting FlashLabs' word that harvest-now-decrypt-later is covered.","newsletterBlurb":"FlashLabs says OrcaRouter, the AI inference gateway it provides for the Japanese market, now encrypts the body of request logs with post-quantum cryptography as standard, with no opt-in and no extra charge, and not restricted to the Enterprise plan. Log bodies are encrypted before being written to storage, using AES-256-GCM with a separate key for each item. The companion implementation, scuttle, was released as open source under the Apache-2.0 license.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/437/4437465/?rss\",\"title\":\"OrcaRouter Adds Post-Quantum Cryptography to All Request Logs as Standard, at No Extra Cost\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4620,"outputTokens":677,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1791148460,"createdAt":"2026-10-04T21:09:58.000Z","publishedAt":"2026-10-04T21:13:20.000Z","updatedAt":"2026-10-04T21:13:20.000Z"},"cluster":{"id":"c_60d615630c5e2a70a35b9380","canonicalTitle":"OrcaRouter、全リクエストログに耐量子暗号を追加料金なしで標準搭載","representativeArticleId":"a_e2d617b2ed462bc235aba8cb","sourceCount":1,"writtenSourceCount":1,"writeAttempts":1,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-09-26T05:00:00.000Z","lastSeenAt":"2026-09-26T05:00:00.000Z","updatedAt":"2026-10-04T21:13:20.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/437/4437465/?rss","title":"OrcaRouter、全リクエストログに耐量子暗号を追加料金なしで標準搭載"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":null}