Quantum computing poses an immediate threat to VPN infrastructure through the "harvest now, decrypt later" attack model, where adversaries collect encrypted traffic today for future decryption with quantum computers. While existing VPN protocols await formal post-quantum standardization, practical protection is needed now. This paper presents a deployable solution for adding post-quantum security to WireGuard without modifying the protocol itself. Our approach leverages WireGuard's existing pre-shared key (PSK) mechanism, delivering quantum-resistant PSKs over channels protected by ML-KEM hybrid TLS 1.3. Through a carefully designed split-service architecture separating authentication from configuration management, we achieve both cryptographic and operational benefits. The authentication service handles client connections using post-quantum TLS, while the configuration service manages WireGuard settings with no direct network exposure, providing defense in depth. This architecture has been successfully deployed across ExpressVPN's global infrastructure, demonstrating its practicality at scale. The solution provides immediate quantum resistance with minimal performance impact (15-20ms additional connection establishment time, no impact on steady-state throughput), supports dynamic IP allocation and simplified key management, and can be implemented by engineering teams without deep cryptographic expertise. We provide detailed implementation guidance for deployments ranging from small (<1,000 users) to enterprise scale. Our work demonstrates that post-quantum WireGuard is achievable today using proven technologies and sound engineering principles, offering VPN providers a straightforward migration path to quantum resistance without abandoning existing WireGuard deployments.
Quantum computing poses an immediate threat to VPN infrastructure through the "harvest now, decrypt later" attack model, where adversaries collect encrypted traffic today for future decryption with quantum computers. While existing VPN protocols await formal post-quantum standardization, practical protection is needed now. This paper presents a deployable solution for adding post-quantum security to WireGuard without modifying the protocol itself. Our approach leverages WireGuard's existing pre-shared key (PSK) mechanism, delivering quantum-resistant PSKs over channels protected by ML-KEM hybrid TLS 1.3. Through a carefully designed split-service architecture separating authentication from configuration management, we achieve both cryptographic and operational benefits. The authentication service handles client connections using post-quantum TLS, while the configuration service manages WireGuard settings with no direct network exposure, providing defense in depth. This architecture has been successfully deployed across ExpressVPN's global infrastructure, demonstrating its practicality at scale. The solution provides immediate quantum resistance with minimal performance impact (15-20ms additional connection establishment time, no impact on steady-state throughput), supports dynamic IP allocation and simplified key management, and can be implemented by engineering teams without deep cryptographic expertise. We provide detailed implementation guidance for deployments ranging from small (<1,000 users) to enterprise scale. Our work demonstrates that post-quantum WireGuard is achievable today using proven technologies and sound engineering principles, offering VPN providers a straightforward migration path to quantum resistance without abandoning existing WireGuard deployments.
WireGuard is a widely adopted, modern, free and open-source VPN protocol known for its high performance, minimal codebase, and strong security. Like all VPN protocols relying on classical public-key cryptography, it faces a growing quantum threat in which adversaries are already collecting encrypted traffic today, intending to decrypt it once sufficiently powerful quantum computers become available, a strategy known as “harvest now, decrypt later”. This thesis evaluates the integration of two NIST-selected post-quantum Key Encapsulation Mechanisms (KEMs): ML-KEM and Hamming Quasi-Cyclic (HQC) into WireGuard’s handshake protocol. Both hybrid and pure-KEM handshake variants were designed and implemented in wireguard-go, the official userspace Go implementation of WireGuard, and benchmarked across handshake latency, message size, and per-peer storage requirements. Results show that ML-KEM integrates well as the hybrid ML-KEM768 variant fits within a single IPv4 packet, adds modest overhead to handshake latency, and keeps storage requirements manageable at scale. Pure ML-KEM variants achieve full post-quantum authentication at the cost of larger messages requiring fragmentation. HQC, by contrast, produces messages large enough to force heavy fragmentation per handshake, resulting in latencies that render it incompatible with WireGuard’s design in its current form. The findings suggest that a hybrid ML-KEM-768 deployment is achievable within existing WireGuard infrastructure today, offering protection against harvest now, decrypt later attacks without replacing the current static key infrastructure or causing significant performance degradation.
This paper presents a user-space integration of ML-KEM-768, a post-quantum key encapsulation mechanism, with WireGuard, a modern VPN protocol. Rather than modifying the Diffie-Hellman handshake of the X25519 elliptic curve at kernel level, the proposed approach establishes a Kyber-based shared secret over the sockets. It injects it as a Pre-Shared Key (PSK) into WireGuard’s Noise protocol. This enhances WireGuard’s resistance to quantum attacks without altering its core code. Experimental results demonstrate successful key agreement and acceptable performance overhead, making the solution viable for hybrid VPN deployments in the post-quantum era.
Building-Wide Virtual Private Network (VPN) systems leverage the current communication infrastructure to connect various IoT devices and management systems through encrypted tunnels. These systems are essential for protecting sensitive data and ensuring operational security but face imminent threats from quantum computers capable of breaking widely-used public key cryptography. In this paper, we propose a lightweight hybrid post-quantum security framework specifically designed for building-wide IoT VPN systems, which combines classical cryptographic primitives (e.g., ECDH) with selected post-quantum crypto (PQC) algorithms (e.g., Kyber, Dilithium). This dual-layer architecture ensures protection against both current and future quantum threats, relying on the hardness of at least one underlying cryptographic assumption for security. Furthermore, the framework incorporates lightweight design principles tailored for resource-constrained IoT environments. These principles emphasize minimal computational demands, reduced communication costs, and limited protocol complexity. Specifically, its lightweight nature reflects simplification to the VPN protocol’s operations and the selected integration of post-quantum algorithms. This optimized application of PQC simplifies the cryptographic workload for key exchange and signature, thereby balancing security guarantees with feasible deployment on IoT hardware. Our analysis and experimental results demonstrate that the proposed architecture achieves quantum resistance with manageable performance impact compared to traditional VPNs, making it a practical and scalable solution for migrating existing building management infrastructures towards post-quantum security across diverse IoT devices.
Abstract—The advent of fault-tolerant Cryptanalytically Relevant Quantum Computers (CRQCs) presents an existential threat to modern information security. Shor's polynomial-time quantum algorithm renders widely deployed public-key cryptographic primitives—including RSA, Diffie-Hellman (DH), and Elliptic Curve Cryptography (ECDH/ECDSA)—completely vulnerable to private key derivation. Furthermore, 'Harvest Now, Decrypt Later' (HNDL) adversarial campaigns actively intercept and store encrypted enterprise telemetry today, anticipating future quantum decryption capabilities. In response, the National Institute of Standards and Technology (NIST) finalized its primary Post-Quantum Cryptography (PQC) standards in FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). However, transitioning complex enterprise IT ecosystems to quantum-resistant primitives introduces severe architectural and computational disruptions: public key and signature sizes increase by several orders of magnitude, cryptographic handshake latencies escalate, network packets experience Maximum Transmission Unit (MTU) fragmentation, and legacy Hardware Security Modules (HSMs) lack microarchitectural support for lattice-based polynomial arithmetic. This paper provides an exhaustive, mathematically grounded technical survey and architectural roadmap for enterprise PQC migration. We formalize the Module Learning with Errors (M-LWE) and Module Short Integer Solution (M-SIS) hardness foundations, evaluate hybrid classical/post-quantum cryptographic transition models across standard transport protocols (TLS 1.3, IKEv2/IPsec, SSH), and formulate an enterprise Crypto-Agility Maturity Model. Furthermore, we construct an empirical enterprise testbed measuring throughput, connection establishment latency, memory footprints, and packet fragmentation across legacy and quantum-resistant suites. Our results show that while ML-KEM-768 achieves microsecond-level encapsulation, its 1,088-byte ciphertext expands TLS ClientHello payloads into multiple TCP segments under constrained networks. Finally, we establish open research directions in post-quantum identity federations, stateful hash signature tracking, and hardware-accelerated polynomial arithmetic. Index Terms—Post-Quantum Cryptography (PQC), FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), Crypto-Agility, TLS 1.3, Lattice-Based Cryptography, Harvest Now Decrypt Later, Hardware Security Modules (HSM), Enterprise Migration.
The advent of cryptographically relevant quantum computers poses an existential threat to current public-key cryptographic systems (RSA, ECC) widely used in digital communication protocols such as TLS, IPsec, VPNs, and secure messaging. Traditional systems face risks from "Harvest Now, Decrypt Later" attacks, compromising long-term confidentiality of sensitive data in finance, healthcare, government, and critical infrastructure. This paper proposes Quantum Shield, a comprehensive post-quantum secure framework for next-generation digital communication. It integrates NIST-standardized post-quantum algorithms (ML-KEM for key encapsulation, ML-DSA and SLH-DSA for digital signatures) with hybrid crypto-agile designs, hardware acceleration support, and role-based access controls. The system ensures quantum-resistant key establishment, authentication, and end-to-end encryption while maintaining low latency and high throughput. Experimental evaluation on simulated network traffic demonstrates acceptable performance overhead, enhanced resistance to quantum attacks, improved traceability, and secure multi-party coordination. Quantum Shield bridges the gap between classical and quantum-safe infrastructures, fostering trust and compliance in an era of quantum threats.
The urgent threat posed by cryptographically significant quantum computers (CRQC) necessitates a global transition to Post-Quantum Cryptography (PQC) to secure Virtual Private Networks (VPNs). Current standardization efforts, notably in IETF drafts, focus predominantly on hybrid constructions, which introduce operational complexity, dual overhead, and retain partial security dependence on quantum-vulnerable primitives. This paper is in effort of StrongVPN, a novel protocol and implementation that achieves end-to-end quantum resistance without hybrid dependencies which is lift and scale model. Our architecture integrates ML-DSA-65 choosen for authentication and ML-KEM-768 for key exchange in a unified, certificate-free** handshake, offering a simplified trust model compared to complex X.509/PKI requirements, reducing overheads. The implementation emphasizes performance through low-level mathematical optimizations, including Number Theoretic Transform (NTT) for efficient polynomial arithmetic, and stringent constant-time operations for side-channel resilience. Empirical evaluation validates its practical feasibility, demonstrating a mean end-to-end handshake latency of only 127ms on commodity infrastructure, despite a necessary 14.1KB cryptographic overhead. StrongVPN establishes a critical, high-performance baseline for pure PQC network security, offering a simplified and accelerated migration path to full quantum safety solution.