OpenVPN offers a variety of cipher suites, including the well-known and dependable AES. IPSec is hardware-accelerated mainly on networking devices like firewalls. Even though IPSec works only on selected cryptographic algorithms, its computational time is less. WireGuard is a promising virtual private network software which is based on primitive cryptographic techniques that are not postquantum safe. In this VPN, forward secrecy is not maintained because all traffic related activities vulnerable to quantum attacks. ECDH protocol is used as Key agreement in TLS and is easily breakable by quantum attacks. The main solution for quantum attack is Kyber. Kyber, a NIST standard algorithm which uses secured key encapsulation mechanism. The security of which is based on the difficulty of solving the LWE problem in module lattices. Two-Party Information Secure Key-Exchange prototype is impossible in classical computers, but it is implemented in quantum computers. PQ based WireGuard performs well in terms of response time and withstand against quantum attacks.
OpenVPN offers a variety of cipher suites, including the well-known and dependable AES. IPSec is hardware-accelerated mainly on networking devices like firewalls. Even though IPSec works only on selected cryptographic algorithms, its computational time is less. WireGuard is a promising virtual private network software which is based on primitive cryptographic techniques that are not postquantum safe. In this VPN, forward secrecy is not maintained because all traffic related activities vulnerable to quantum attacks. ECDH protocol is used as Key agreement in TLS and is easily breakable by quantum attacks. The main solution for quantum attack is Kyber. Kyber, a NIST standard algorithm which uses secured key encapsulation mechanism. The security of which is based on the difficulty of solving the LWE problem in module lattices. Two-Party Information Secure Key-Exchange prototype is impossible in classical computers, but it is implemented in quantum computers. PQ based WireGuard performs well in terms of response time and withstand against quantum attacks.
A Virtual Private Network (VPN) ensures the confidentiality and integrity of data transferred between two endpoints, even if the means of transport are insecure. One popular protocol is Internet Protocol Security (IPSec) which operates at OSI layer 3 and protects all protocols at higher layers. Cryptographic keys in IPSec are negotiated using the Internet Key Exchange (IKE) protocol. IKE negotiates security parameters for IPSec sessions. In particular, the IKEv2 protocol uses the Elliptic Curve Diffie-Hellman (ECDH) algorithm to establish a secret key shared between two nodes on a network. Although solving such a problem remains difficult with current computing power, it is believed that generic quantum computers will be able to solve this problem, which implies that the security of IKEv2 is compromised. There are, however, several cryptographic systems that are trusted to be resistant to attacks by quantum computers. This family of cryptosystems is known as quantum-resistant cryptography (QRC). In this paper, after highlighting the requirements for a secure key exchange protocol, we briefly review the QRC solutions that have been proposed in the recent literature.
The fast development of quantum computing presents a great threat to the security of classical cryptographic algorithms that support secure communication systems like Virtual Private Networks (VPNs). RSA and ECC algorithms that are commonly employed in key exchange and digital authentication can fall victim to quantum attacks from Shor’s and Grover’s algorithms. This study introduces the design and deployment of a post-quantum-resistant VPN protocol using post-quantum cryptographic (PQC) primitives, i.e., Kyber for key encapsulation and Dilithium for digital signatures. The suggested structure is incorporated into OpenVPN via the Open Quantum Safe (OQS) framework for uninterrupted post-quantum compatibility. The protocol is also capable of supporting hybrid cryptography for smooth transition from classical to post-quantum systems. Performance benchmarks are performed over metrics like handshake latency, tunnel throughput, CPU usage, and certificate overhead. The findings illustrate that post-quantum secure VPNs are not only achievable but also feasible for near-future deployment. This work adds a future-proof framework to improve the resilience of secure communications in the post-quantum era with a focus on scalability, crypto-agility, and real-world implementation readiness.
This paper introduces qTrustNet VPN, a next-generation Virtual Private Network (VPN) designed to enhance security in the quantum era. As traditional encryption methods face obsolescence due to the advent of quantum computing, there is an urgent need for more robust security solutions. qTrustNet VPN addresses this need by ensuring the confidentiality and integrity of data transmission through the WireGuard protocol, known for its simplicity and high performance. At the core of qTrustNet VPN’s enhanced security is the integration of a Post-Quantum Cryptography (PQC) algorithm, developed by the National Institute of Standards and Technology (NIST). This PQC algorithm is designed to withstand the decryption capabilities of quantum computers, thus providing long-term security. To further bolster security, the encryption key of the PQC algorithm is protected using Physically Unclonable Function (PUF) technology. PUFs offer a hardware-based security mechanism that is resistant to cloning and tampering, ensuring that the encryption keys remain secure against both classical and quantum attacks. This innovative combination of WireGuard protocol, PQC algorithms, and PUF technology creates a VPN system with significantly improved security features. To validate its effectiveness, the performance of the proposed qTrustNet VPN was rigorously evaluated in a 10GbE NIC network environment. The results demonstrated a remarkable throughput of up to 8.5 Gbps, ensuring high-speed data transmission capabilities. Additionally, the latency was measured at 1ms or less, highlighting the system’s efficiency in maintaining low-latency communication. In summary, qTrustNet VPN represents a significant advancement in VPN technology, offering robust security features tailored for the quantum era while maintaining high performance and low latency. This paper details the design, implementation, and performance evaluation of qTrustNet VPN, showcasing its potential to secure data transmission against emerging quantum threats.
The significance of virtual private networks (VPN) has increased rapidly over time. Enterprises utilize IPsec and other VPN technologies to provide a secure connection to mission-critical resources over the internet. The various sub-protocols of IPsec i.e., Encapsulation Security Payload (ESP) and Authentication Header (AH) provide confidentiality and integrity through the encryption mechanisms. Unfortunately, recent studies indicate that the traditional encryption techniques employed in IPsec could face a potential threat from the progress of quantum computing. To address this issue, this research proposes an improved Encapsulation Security Payload for Quantum Safety (ESPQ) which can serve as a post-quantum encryption and authentication algorithm for VPN networks. The proposed algorithm incorporates modern quantum-safe algorithms into its framework. Through extensive research and analysis of performance metrics, it has become evident that ESPQ surpasses the conventional methodology of ESP both in terms of heightened security safeguards and reduced system load requirements.
This paper introduces qTrustNet VPN, a next-generation Virtual Private Network (VPN) designed to enhance security in the quantum era. With the rapid advancement of quantum computing, traditional encryption methods face obsolescence, necessitating more robust security solutions. qTrustNet VPN addresses this need by integrating the WireGuard protocol, known for its simplicity and high performance, with Post-Quantum Cryptography (PQC) algorithms developed by the National Institute of Standards and Technology (NIST). These PQC algorithms are designed to withstand the decryption capabilities of quantum computers, providing long-term security.
The current VPN systems that use Classical Cryptography are becoming increasingly vulnerable to attacks on Quantum Computers. This paper examines the creation and implementation of a Quantum-Safe VPN solution that incorporates Post-Quantum Cryptography (PQC) via the Kyber 512 algorithm. The proposal includes a practical client/server implementation using WireGuard as the tunneling protocol and Tailscale for connectivity with an additional level of protection enabling the use of PQC for key exchange via the liboqs library. Selected performance metrics were determined (latency, handshake duration, CPU utilization, throughput) and compared with those of the Classical VPNs. The findings indicate that while PQC will add extra processing overhead (in particular, the Handshake process), it provides a significantly stable and secure channel for communications. Although throughput was less than with Classical VPNs, and CPU usage was increased, the PQC enabled VPN was found to provide acceptable reliability and produce zero packet losses. The results of this study have proven that integration of PQC in a VPN is achievable in real world applications and demonstrates the necessity for secure methods in future networking.