Securing the Agentic Economy: Inside AetherNet's Post Quantum E2EE Architecture

<article class="not-prose break-words"> <div class="grid grid-cols-2 md:grid-cols-4 gap-4 mb-12"> <div class="bg-gradient-to-br from-[#0ea5e9]/10 to-[#2563eb]/10 border border-[#0ea5e9]/30 rounded-xl p-4 md:p-6 text-center"> <div class="text-2xl md:text-4xl font-bold text-[#0ea5e9] mb-1">$54B+</div> <div class="text-xs text-muted-foreground font-mono tracking-wide">Government Quantum Investment</div> </div> <div class="bg-gradient-to-br from-[#0ea5e9]/10 to-[#2563eb]/10 border border-[#0ea5e9]/30 rounded-xl p-4 md:p-6 text-center"> <div class="text-2xl md:text-4xl font-bold text-[#0ea5e9] mb-1">2026</div> <div class="text-xs text-muted-foreground font-mono tracking-wide">FIPS-203 / 204 Finalized</div> </div> <div class="bg-gradient-to-br from-[#0ea5e9]/10 to-[#2563eb]/10 border border-[#0ea5e9]/30 rounded-xl p-4 md:p-6 text-center"> <div class="text-2xl md:text-4xl font-bold text-[#0ea5e9] mb-1">0</div> <div class="text-xs text-muted-foreground font-mono tracking-wide">PQC Production Chains Today</div> </div> <div class="bg-gradient-to-br from-[#0ea5e9]/10 to-[#2563eb]/10 border border-[#0ea5e9]/30 rounded-xl p-4 md:p-6 text-center"> <div class="text-2xl md:text-4xl font-bold text-[#0ea5e9] mb-1">&lt;1ms</div> <div class="text-xs text-muted-foreground font-mono tracking-wide">TEE Decapsulation Latency</div> </div> </div> <div class="relative bg-gradient-to-r from-[#0ea5e9]/10 to-[#2563eb]/10 border border-[#0ea5e9]/30 border-l-4 border-l-[#0ea5e9] rounded-xl p-6 md:p-8 mb-12 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-xs text-[#0ea5e9]/10 p-4 leading-relaxed text-right hidden md:block select-none"> ML-KEM::ENCAP<br>AES-GCM::SEAL<br>ML-DSA::SIGN<br>TEE::ATTEST </div> <h2 class="text-xl md:text-2xl font-bold text-foreground mb-4 flex items-center gap-3"> <span class="w-10 h-10 bg-[#0ea5e9] text-white rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0">!</span> Executive Summary </h2> <p class="text-foreground/90 leading-relaxed mb-4"> The transition to agentic commerce is no longer a theoretical horizon — it is an active infrastructure shift. As autonomous AI agents begin negotiating, transacting, and settling financial mandates on behalf of enterprises, the underlying communication layer faces a catastrophic threat: <strong class="text-[#0ea5e9]">legacy cryptography</strong>. </p> <p class="text-foreground/90 leading-relaxed mb-0"> Standard RSA and ECC encryption protocols are fundamentally insufficient against "Harvest Now, Decrypt Later" quantum attacks. AetherNet is Kronova's answer: a zero-trust, bare-metal settlement architecture built entirely on <strong class="text-foreground">finalized NIST post-quantum standards</strong> — FIPS-203 ML-KEM, FIPS-204 ML-DSA, and Rust-based Trusted Execution Environments. </p> </div> <div class="mb-12"> <h2 class="text-2xl md:text-3xl font-bold text-foreground mb-6 tracking-tight">The Threat: "Harvest Now, Decrypt Later"</h2> <p class="text-muted-foreground leading-relaxed mb-6"> If an AI agent is transmitting proprietary corporate treasury strategies or Protected Health Information (PHI) to a settlement network today, that payload requires mathematical guarantees that extend decades into the future. Nation-state adversaries are already harvesting encrypted traffic at scale, holding it until sufficiently powerful quantum computers arrive to decrypt it retroactively. </p> <p class="text-muted-foreground leading-relaxed mb-6"> Current API security relies heavily on transport-layer security (TLS) terminating at an intermediary proxy. In an agentic network, intermediaries cannot be trusted with plaintext financial intents. Four structural vulnerabilities compound the threat. </p> <div class="space-y-4 mb-8"> <div class="relative bg-gradient-to-br from-red-950/30 to-background border border-red-500/25 rounded-xl p-6 md:p-8 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-red-500/15 p-3 leading-loose hidden md:block select-none">TLS::TERMINATED<br>PROXY::EXPOSED<br>INTENT::LEAKED</div> <div class="flex items-start gap-4 mb-4"> <div class="w-10 h-10 bg-red-500/20 border border-red-500/30 text-red-400 rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0">1</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">TLS Terminates at the Proxy</h3> <p class="text-sm text-red-400 font-mono font-medium mt-1 tracking-wide">Standard API security decrypts at the intermediary before re-encrypting</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-0">In an agentic network, no intermediary can be trusted with plaintext financial intents. Every proxy hop is a potential harvest point for a patient, quantum-capable adversary collecting today's ciphertext for tomorrow's decryption.</p> </div> <div class="relative bg-gradient-to-br from-red-950/30 to-background border border-red-500/25 rounded-xl p-6 md:p-8 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-red-500/15 p-3 leading-loose hidden md:block select-none">ECC::VULNERABLE<br>SHOR::ACTIVE<br>RSA::BROKEN</div> <div class="flex items-start gap-4 mb-4"> <div class="w-10 h-10 bg-red-500/20 border border-red-500/30 text-red-400 rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0">2</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">ECC and RSA are Quantum-Vulnerable</h3> <p class="text-sm text-red-400 font-mono font-medium mt-1 tracking-wide">Shor's algorithm solves the discrete logarithm problem underpinning both</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-0">Today's TLS handshakes will be decryptable by sufficiently powerful quantum hardware. Any payload secured with ECC or RSA today is a retroactive liability within a decade.</p> </div> <div class="relative bg-gradient-to-br from-red-950/30 to-background border border-red-500/25 rounded-xl p-6 md:p-8 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-red-500/15 p-3 leading-loose hidden md:block select-none">IDENTITY::NONE<br>AGENT::UNVERIFIED<br>MANDATE::FORGED</div> <div class="flex items-start gap-4 mb-4"> <div class="w-10 h-10 bg-red-500/20 border border-red-500/30 text-red-400 rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0">3</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">No Agent Identity Standards Exist</h3> <p class="text-sm text-red-400 font-mono font-medium mt-1 tracking-wide">No cryptographic mechanism validates authorized autonomous agents today</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-0">Current infrastructure has no mechanism to validate that a transacting party is an authorized autonomous agent rather than a malicious impersonator or prompt-injection attack vector.</p> </div> <div class="relative bg-gradient-to-br from-red-950/30 to-background border border-red-500/25 rounded-xl p-6 md:p-8 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-red-500/15 p-3 leading-loose hidden md:block select-none">MCP::PLAINTEXT<br>PAYLOAD::EXPOSED<br>CONTEXT::LEAKED</div> <div class="flex items-start gap-4 mb-4"> <div class="w-10 h-10 bg-red-500/20 border border-red-500/30 text-red-400 rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0">4</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">MCP Payloads Are Plaintext in Transit</h3> <p class="text-sm text-red-400 font-mono font-medium mt-1 tracking-wide">Model Context Protocol assumes a secure transport that does not yet exist</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-0">MCP defines the payload structure but has no native E2EE. Every tool call, every context object, and every financial intent is readable at every hop between originating agent and destination.</p> </div> </div> <div class="bg-gradient-to-r from-[#0ea5e9]/8 to-[#2563eb]/8 border border-[#0ea5e9]/25 rounded-xl p-5 md:p-6"> <p class="text-foreground/90 leading-relaxed mb-0 font-medium"> <strong class="text-[#0ea5e9]">The solution is architectural, not incremental:</strong> AetherNet enforces true E2EE by ensuring the payload is sealed by the transmitting agent and only ever decapsulated inside the recipient's secure enclave — using finalized NIST standards throughout the entire chain. </p> </div> </div> <div class="mb-12"> <div class="bg-gradient-to-r from-[#0ea5e9]/20 via-[#2563eb]/15 to-[#0ea5e9]/20 border border-[#0ea5e9]/40 rounded-2xl p-6 md:p-8 lg:p-10 mb-8"> <h2 class="text-2xl md:text-3xl lg:text-4xl font-bold text-foreground mb-3 tracking-tight">The Solution: The Post-Quantum Envelope Architecture</h2> <p class="text-foreground/70 leading-relaxed mb-0 max-w-2xl"> AetherNet implements the official FIPS-203 ML-KEM standard natively in the SDK. Every mandate travels sealed from origin to TEE — no intermediary can read it at any point in transit. </p> </div> <div class="relative bg-gradient-to-br from-[#0ea5e9]/8 to-[#2563eb]/5 border border-[#0ea5e9]/30 rounded-xl p-6 md:p-8 mb-6 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-[#0ea5e9]/12 p-4 leading-loose hidden md:block select-none">ML-KEM::ENCAP<br>SECRET::32B<br>CIPHERTEXT::1568B<br>QUANTUM::SAFE</div> <div class="flex items-start gap-4 mb-6"> <div class="w-10 h-10 bg-[#0ea5e9] text-white rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0 shadow-[0_0_20px_rgba(14,165,233,0.4)]">1</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">Asymmetric Encapsulation</h3> <p class="text-sm text-[#0ea5e9] font-mono font-medium mt-1 tracking-wide">FIPS-203 ML-KEM — Module-Lattice Key Encapsulation</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-6"> The transmitting agent uses the public ML-KEM key of the destination TEE to generate a mathematically binding ciphertext and a 32-byte shared secret. The private key never leaves the recipient enclave. Only the intended autonomous model can perform decapsulation — no proxy, no intermediary, no exception. </p> <div class="grid md:grid-cols-3 gap-4"> <div class="bg-background/60 backdrop-blur border border-[#0ea5e9]/20 rounded-lg p-4 hover:border-[#0ea5e9]/40 transition-colors"> <div class="text-[#0ea5e9] font-semibold mb-2 text-sm">ML-KEM-1024</div> <p class="text-xs text-muted-foreground mb-0 leading-relaxed">NIST security level 5. 1568-byte ciphertext. Equivalent to AES-256 against both classical and quantum adversaries.</p> </div> <div class="bg-background/60 backdrop-blur border border-[#0ea5e9]/20 rounded-lg p-4 hover:border-[#0ea5e9]/40 transition-colors"> <div class="text-[#0ea5e9] font-semibold mb-2 text-sm">32-Byte Shared Secret</div> <p class="text-xs text-muted-foreground mb-0 leading-relaxed">The encapsulation output is known only to the transmitting agent and the destination TEE. It never travels across the network in any readable form.</p> </div> <div class="bg-background/60 backdrop-blur border border-[#0ea5e9]/20 rounded-lg p-4 hover:border-[#0ea5e9]/40 transition-colors"> <div class="text-[#0ea5e9] font-semibold mb-2 text-sm">One-Time Per Mandate</div> <p class="text-xs text-muted-foreground mb-0 leading-relaxed">Fresh encapsulation per mandate guarantees forward secrecy — compromise of one session key does not expose past or future sessions.</p> </div> </div> </div> <div class="relative bg-gradient-to-br from-[#2563eb]/8 to-[#0ea5e9]/5 border border-[#2563eb]/30 rounded-xl p-6 md:p-8 mb-6 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-[#2563eb]/15 p-4 leading-loose hidden md:block select-none">AES-256-GCM::SEAL<br>IV::12B<br>TAG::16B<br>PAYLOAD::SEALED</div> <div class="flex items-start gap-4 mb-6"> <div class="w-10 h-10 bg-[#2563eb] text-white rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0 shadow-[0_0_20px_rgba(37,99,235,0.4)]">2</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">Symmetric Payload Encryption</h3> <p class="text-sm text-[#2563eb] font-mono font-medium mt-1 tracking-wide">AES-256-GCM — Authenticated Encryption with Associated Data</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-6"> The actual payload — a block trade execution, a healthcare claim, a treasury mandate — is encrypted via AES-256-GCM using the 32-byte shared secret from Step 1. GCM mode generates a 16-byte authentication tag and a 12-byte IV, providing both confidentiality and integrity in a single pass. </p> <div class="grid md:grid-cols-2 gap-4"> <div class="bg-background/60 backdrop-blur border border-[#2563eb]/20 rounded-lg p-4 hover:border-[#2563eb]/40 transition-colors"> <div class="text-[#2563eb] font-semibold mb-2 text-sm">Authenticated Encryption</div> <p class="text-xs text-muted-foreground mb-0 leading-relaxed">The 16-byte GCM authentication tag detects any single-bit modification to the ciphertext. A tampered payload is rejected before decryption is attempted.</p> </div> <div class="bg-background/60 backdrop-blur border border-[#2563eb]/20 rounded-lg p-4 hover:border-[#2563eb]/40 transition-colors"> <div class="text-[#2563eb] font-semibold mb-2 text-sm">Zero Plaintext Transit</div> <p class="text-xs text-muted-foreground mb-0 leading-relaxed">The MCP payload never travels as plaintext across any network hop. Only ciphertext, IV, and authentication tag are transmitted — readable by no intermediary.</p> </div> </div> </div> <div class="relative bg-gradient-to-br from-[#0ea5e9]/8 to-[#2563eb]/5 border border-[#0ea5e9]/30 rounded-xl p-6 md:p-8 mb-6 overflow-hidden"> <div class="absolute top-0 right-0 font-mono text-[10px] text-[#0ea5e9]/12 p-4 leading-loose hidden md:block select-none">ML-DSA::SIGN<br>SIG::4627B<br>IDENTITY::BOUND<br>NON-REPUDIATION::ON</div> <div class="flex items-start gap-4 mb-6"> <div class="w-10 h-10 bg-[#0ea5e9] text-white rounded-lg flex items-center justify-center text-lg font-bold flex-shrink-0 shadow-[0_0_20px_rgba(14,165,233,0.4)]">3</div> <div> <h3 class="text-lg md:text-xl font-bold text-foreground">The FIPS-204 Envelope Signature</h3> <p class="text-sm text-[#0ea5e9] font-mono font-medium mt-1 tracking-wide">ML-DSA — Module-Lattice Digital Signature Algorithm</p> </div> </div> <p class="text-muted-foreground leading-relaxed mb-6"> The entire sealed envelope is signed using FIPS-204 ML-DSA to prove the agent's identity and mandate intent. This 4627-byte signature is quantum-resistant and unforgeable. The TEE validates it before decapsulation begins — a tampered identity causes immediate discard. </p> <div class="bg-[#0ea5e9]/8 border border-[#0ea5e9]/20 rounded-lg p-4"> <p class="text-sm text-foreground/85 leading-relaxed mb-0"> <strong class="text-[#0ea5e9]">The trust model:</strong> If the agent's identity or mandate intent has been tampered with at any point in transit, the ML-DSA signature check fails and the envelope is discarded without ever reaching the settlement engine. </p> </div> </div> </div> <div class="mb-12"> <h2 class="text-2xl md:text-3xl font-bold text-foreground mb-6 tracking-tight">Legacy Cryptography vs. AetherNet PQC Standards</h2> <div class="overflow-x-auto rounded-xl border border-[#0ea5e9]/20 shadow-[0_0_30px_rgba(14,165,233,0.06)]"> <table class="w-full text-sm"> <thead> <tr class="bg-gradient-to-r from-[#0ea5e9]/10 to-[#2563eb]/10 border-b border-[#0ea5e9]/20"> <th class="text-left py-4 px-5 font-semibold text-foreground font-mono text-xs tracking-widest uppercase">Property</th> <th class="text-left py-4 px-5 font-semibold text-muted-foreground font-mono text-xs tracking-widest uppercase">RSA / ECC</th> <th class="text-left py-4 px-5 font-semibold text-[#0ea5e9] font-mono text-xs tracking-widest uppercase">AetherNet PQC</th> </tr> </thead> <tbody> <tr class="border-b border-border/40 hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">Key Exchange</td> <td class="py-3.5 px-5 text-muted-foreground">ECDH (quantum-vulnerable)</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">FIPS-203 ML-KEM-1024</td> </tr> <tr class="border-b border-border/40 hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">Payload Encryption</td> <td class="py-3.5 px-5 text-muted-foreground">AES-128 (adequate today)</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">AES-256-GCM (quantum-hardened)</td> </tr> <tr class="border-b border-border/40 hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">Digital Signature</td> <td class="py-3.5 px-5 text-muted-foreground">ECDSA (quantum-vulnerable)</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">FIPS-204 ML-DSA-87</td> </tr> <tr class="border-b border-border/40 hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">Harvest-Now Risk</td> <td class="py-3.5 px-5 text-muted-foreground">Critical — decryptable in future</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">Eliminated — lattice-hard problem</td> </tr> <tr class="border-b border-border/40 hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">TLS Integration</td> <td class="py-3.5 px-5 text-muted-foreground">TLS 1.3 (ECDHE key exchange)</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">TLS 1.3 + ML-KEM ephemeral</td> </tr> <tr class="border-b border-border/40 hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">Execution Environment</td> <td class="py-3.5 px-5 text-muted-foreground">User-space process</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">Hardware Rust TEE (memory-safe)</td> </tr> <tr class="hover:bg-[#0ea5e9]/3 transition-colors"> <td class="py-3.5 px-5 text-foreground font-medium">NIST Standard</td> <td class="py-3.5 px-5 text-muted-foreground">Pre-quantum era</td> <td class="py-3.5 px-5 text-[#0ea5e9] font-medium">FIPS-203, FIPS-204 (2024)</td> </tr> </tbody> </table> </div> </div> <div class="mb-12"> <h2 class="text-2xl md:text-3xl font-bold text-foreground mb-6 tracking-tight">The Foundation for Agentic Commerce</h2> <p class="text-muted-foreground leading-relaxed mb-6"> We are not just building a payment protocol; we are building the required cryptographic primitives for the next generation of the internet. By open-sourcing the Kronova SDK, we are giving developers the tools to instantly drop quantum-proof, SMART on FHIR compliant authentication and secure envelope routing directly into their Next.js and Node environments. </p> <p class="text-muted-foreground leading-relaxed mb-6"> Only at the exact microsecond of decapsulation — deep inside the memory-safe confines of the Rust TEE — does the payload become readable plaintext. There is no window, no exception, and no API endpoint through which the decrypted data escapes the enclave boundary before reaching the settlement engine. </p> <div class="relative border-l-4 border-[#0ea5e9] pl-4 md:pl-6 mb-6"> <p class="text-lg md:text-xl italic text-[#0ea5e9] leading-relaxed mb-0"> "The agentic economy requires determinism, zero-trust routing, and post-quantum secrecy. With AetherNet, that infrastructure is officially live." </p> </div> <p class="text-muted-foreground leading-relaxed"> The future of autonomous agent commerce is not built on legacy TLS. It is built on lattice-hardened cryptographic envelopes, hardware-isolated execution, and NIST-standardized post-quantum primitives. AetherNet delivers all three — in production, today. </p> </div> <div class="relative bg-gradient-to-br from-[#0ea5e9]/10 via-[#2563eb]/8 to-[#0ea5e9]/10 border border-[#0ea5e9]/30 rounded-2xl p-6 md:p-10 lg:p-12 text-center overflow-hidden"> <div class="absolute inset-0 opacity-[0.025]" style="background-image: linear-gradient(#0ea5e9 1px, transparent 1px), linear-gradient(90deg, #0ea5e9 1px, transparent 1px); background-size: 30px 30px;"></div> <div class="absolute -bottom-10 -left-10 w-48 h-48 rounded-full opacity-[0.05]" style="background: radial-gradient(circle, #2563eb, transparent 70%);"></div> <div class="relative"> <div class="inline-flex items-center gap-2 bg-[#0ea5e9]/10 border border-[#0ea5e9]/30 text-[#0ea5e9] text-xs font-mono font-semibold px-3 py-1.5 rounded-full tracking-widest uppercase mb-6"> <span class="w-1.5 h-1.5 bg-[#0ea5e9] rounded-full animate-pulse"></span> Now Accepting Applications </div> <h2 class="text-2xl md:text-3xl font-bold text-foreground mb-4 tracking-tight"> Deploy Post-Quantum E2EE Today </h2> <p class="text-foreground/70 leading-relaxed mb-8 max-w-xl mx-auto"> AetherNet is accepting select partners for our Q2 2026 private alpha. If you require quantum-proof, zero-trust agent communication infrastructure for institutional or regulated deployments, contact Kronova today. </p> <div class="flex flex-col sm:flex-row items-center justify-center gap-4"> <a href="/enterprise-pilot" class="inline-flex items-center gap-2 bg-gradient-to-r from-[#0ea5e9] via-[#3b82f6] to-[#2563eb] hover:opacity-90 text-white font-semibold px-6 py-3 rounded-lg transition-all duration-200 shadow-[0_0_25px_rgba(14,165,233,0.3)] hover:shadow-[0_0_40px_rgba(14,165,233,0.45)]"> Apply for Enterprise Pilot <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M17 8l4 4m0 0l-4 4m4-4H3"></path></svg> </a> <a href="https://calendly.com/robert-kronova/30min" target="_blank" rel="noopener noreferrer" class="inline-flex items-center gap-2 bg-background/60 backdrop-blur border-2 border-[#0ea5e9]/30 hover:border-[#0ea5e9]/60 hover:bg-[#0ea5e9]/10 text-foreground font-semibold px-6 py-3 rounded-lg transition-all duration-200"> Book Enterprise Pilot &amp; LOI Sync <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 7V3m8 4V3m-9 8h10M5 21h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v12a2 2 0 002 2z"></path></svg> </a> </div> </div> </div> </article>