The current VPN systems that use Classical Cryptography are becoming increasingly vulnerable to attacks on Quantum Computers. This paper examines the creation and implementation of a Quantum-Safe VPN solution that incorporates Post-Quantum Cryptography (PQC) via the Kyber 512 algorithm. The proposal includes a practical client/server implementation using WireGuard as the tunneling protocol and Tailscale for connectivity with an additional level of protection enabling the use of PQC for key exchange via the liboqs library. Selected performance metrics were determined (latency, handshake duration, CPU utilization, throughput) and compared with those of the Classical VPNs. The findings indicate that while PQC will add extra processing overhead (in particular, the Handshake process), it provides a significantly stable and secure channel for communications. Although throughput was less than with Classical VPNs, and CPU usage was increased, the PQC enabled VPN was found to provide acceptable reliability and produce zero packet losses. The results of this study have proven that integration of PQC in a VPN is achievable in real world applications and demonstrates the necessity for secure methods in future networking.
The current VPN systems that use Classical Cryptography are becoming increasingly vulnerable to attacks on Quantum Computers. This paper examines the creation and implementation of a Quantum-Safe VPN solution that incorporates Post-Quantum Cryptography (PQC) via the Kyber 512 algorithm. The proposal includes a practical client/server implementation using WireGuard as the tunneling protocol and Tailscale for connectivity with an additional level of protection enabling the use of PQC for key exchange via the liboqs library. Selected performance metrics were determined (latency, handshake duration, CPU utilization, throughput) and compared with those of the Classical VPNs. The findings indicate that while PQC will add extra processing overhead (in particular, the Handshake process), it provides a significantly stable and secure channel for communications. Although throughput was less than with Classical VPNs, and CPU usage was increased, the PQC enabled VPN was found to provide acceptable reliability and produce zero packet losses. The results of this study have proven that integration of PQC in a VPN is achievable in real world applications and demonstrates the necessity for secure methods in future networking.
The fast development of quantum computing presents a great threat to the security of classical cryptographic algorithms that support secure communication systems like Virtual Private Networks (VPNs). RSA and ECC algorithms that are commonly employed in key exchange and digital authentication can fall victim to quantum attacks from Shor’s and Grover’s algorithms. This study introduces the design and deployment of a post-quantum-resistant VPN protocol using post-quantum cryptographic (PQC) primitives, i.e., Kyber for key encapsulation and Dilithium for digital signatures. The suggested structure is incorporated into OpenVPN via the Open Quantum Safe (OQS) framework for uninterrupted post-quantum compatibility. The protocol is also capable of supporting hybrid cryptography for smooth transition from classical to post-quantum systems. Performance benchmarks are performed over metrics like handshake latency, tunnel throughput, CPU usage, and certificate overhead. The findings illustrate that post-quantum secure VPNs are not only achievable but also feasible for near-future deployment. This work adds a future-proof framework to improve the resilience of secure communications in the post-quantum era with a focus on scalability, crypto-agility, and real-world implementation readiness.
Building-Wide Virtual Private Network (VPN) systems leverage the current communication infrastructure to connect various IoT devices and management systems through encrypted tunnels. These systems are essential for protecting sensitive data and ensuring operational security but face imminent threats from quantum computers capable of breaking widely-used public key cryptography. In this paper, we propose a lightweight hybrid post-quantum security framework specifically designed for building-wide IoT VPN systems, which combines classical cryptographic primitives (e.g., ECDH) with selected post-quantum crypto (PQC) algorithms (e.g., Kyber, Dilithium). This dual-layer architecture ensures protection against both current and future quantum threats, relying on the hardness of at least one underlying cryptographic assumption for security. Furthermore, the framework incorporates lightweight design principles tailored for resource-constrained IoT environments. These principles emphasize minimal computational demands, reduced communication costs, and limited protocol complexity. Specifically, its lightweight nature reflects simplification to the VPN protocol’s operations and the selected integration of post-quantum algorithms. This optimized application of PQC simplifies the cryptographic workload for key exchange and signature, thereby balancing security guarantees with feasible deployment on IoT hardware. Our analysis and experimental results demonstrate that the proposed architecture achieves quantum resistance with manageable performance impact compared to traditional VPNs, making it a practical and scalable solution for migrating existing building management infrastructures towards post-quantum security across diverse IoT devices.
Currently available cryptographic algorithms such as the RSA, Diffie-Hellman and the ECC are used in securing most Internet communications across the Internet. Theoretical quantum algorithms (and the Shor algorithm in particular) were demonstrated to be able to efficiently break that type of classical cryptography as soon as large-scale quantum computers are developed. To handle this new emerging security problem, PQC has been proposed as a class of cryptographic algorithms that is resistant to both quantum and classical attackers. It is a research paper offering and experimentally implementing a hybrid PQC-TLS protocol in a heterogeneous network architecture which includes edge computing devices and cloud computing and IoT devices. The suggested architecture integrates both lattice-based CRYSTALS-Kyber key encapsulation scheme and CRYSTALS-Dilithium digital signature scheme in the TLS 1.3 handshake without being interoperable with the older ECC-based key exchange schemes. Five measures of performance that included handshake latency, CPU consumption, memory consumption, bandwidth overhead and energy consumption were analyzed in detail through experimentation. The experiments were conducted using in Iot, edge and cloud nodes under controlled conditions that were repeated a number of times to give reliability in the statistics. The results indicate that the integration of PQC has moderate overhead (mean increase in latency about 1517) and decent computational and energy requirements. Another method of resisting popular attacks on networks like as the man in the middle, replay, and downgrade attacks, is security validation. The findings indicate that quantum resilient secure communication migration to a heterogeneous distributed infrastructure can be practically and scalably provided using hybrid PQC-TLS protocols. Statistical analysis including standard deviation and 95% confidence intervals was performed to validate the reliability of the results.
This paper introduces qTrustNet VPN, a next-generation Virtual Private Network (VPN) designed to enhance security in the quantum era. As traditional encryption methods face obsolescence due to the advent of quantum computing, there is an urgent need for more robust security solutions. qTrustNet VPN addresses this need by ensuring the confidentiality and integrity of data transmission through the WireGuard protocol, known for its simplicity and high performance. At the core of qTrustNet VPN’s enhanced security is the integration of a Post-Quantum Cryptography (PQC) algorithm, developed by the National Institute of Standards and Technology (NIST). This PQC algorithm is designed to withstand the decryption capabilities of quantum computers, thus providing long-term security. To further bolster security, the encryption key of the PQC algorithm is protected using Physically Unclonable Function (PUF) technology. PUFs offer a hardware-based security mechanism that is resistant to cloning and tampering, ensuring that the encryption keys remain secure against both classical and quantum attacks. This innovative combination of WireGuard protocol, PQC algorithms, and PUF technology creates a VPN system with significantly improved security features. To validate its effectiveness, the performance of the proposed qTrustNet VPN was rigorously evaluated in a 10GbE NIC network environment. The results demonstrated a remarkable throughput of up to 8.5 Gbps, ensuring high-speed data transmission capabilities. Additionally, the latency was measured at 1ms or less, highlighting the system’s efficiency in maintaining low-latency communication. In summary, qTrustNet VPN represents a significant advancement in VPN technology, offering robust security features tailored for the quantum era while maintaining high performance and low latency. This paper details the design, implementation, and performance evaluation of qTrustNet VPN, showcasing its potential to secure data transmission against emerging quantum threats.
Recent advances in quantum computing have prompted urgent consideration for the migration of classical cryptographic systems to post-quantum alternatives. However, it is impossible to fully understand the impact that migrating to current Post-Quantum Cryptography (PQC) algorithms will have on various applications without actual implementation of quantum-resistant cryptography. On the other hand, PQC algorithms come with complexity and long processing times, which may impact the Quality of Service (QoS) of many applications. Therefore, PQC-based protocols with practical implementation across various applications are essential. This paper introduces a new framework for PQC standalone and PQC-AES (Advanced Encryption Standard) hybrid Public Key Encryption (PKE) protocols. Building on prior results, we focus on securing applications such as file transfer, video streaming, and chat-based communication using enhanced PQC-based protocols. The extended PQC-based protocols use a sequence number-based mechanism to effectively counter replay and man-in-the-middle attacks and mitigate standard cybersecurity attack vectors. Experimental evaluations examined encryption/decryption speeds, throughput, and processing overhead for these standalone PQC and PQC-AES hybrid schemes, benchmarking them against traditional AES-256 in an existing client-server environment. The results demonstrate that the new approaches achieve a significant balance between security and system performance compared to conventional deployments. Furthermore, the comprehensive security analysis confirms the robustness and effectiveness of the proposed PQC-based protocols across diverse attack scenarios. Notably, the PQC-AES hybrid protocol demonstrates greater efficiency for applications handling larger data volumes (e.g., 10–100 KB) with reduced latency, underscoring the practical necessity of carefully balancing security and operational efficiency in the post-quantum migration process.
The Hybrid approach in Quantum Cryptography creates adaptable security model which provides the safest Communication in the emerging quantum era. The development of quantum computing raise questions about the long-term security. Traditional algorithms, such as RSA, ECC, and Diffie-Hellman, which is seemed computationally secure but it can be effectively solved by quantum algorithms such as Shor's and Grover's. This problem leads to the origination of two key trends in current studies, namely Post-Quantum Cryptography (PQC), designing mathematical approaches to encryption resistant to quantum attacks; Quantum Key Distribution (QKD) using the principles of quantum mechanics to assure security in communications. Accordingly, this research proposes a hybrid security framework including reliable data encryption and authentication using PQC, combined with the safe key- exchange method of QKD. The model is implemented in Python, Qiskit, and PQClean's Kyber and Dilithium algorithms to show how these two paradigms can cooperate toward quantum- resilient communication. To present the system performance, key exchange efficiency, computational overhead, and security strength have been considered. According to the results, this hybrid approach gives superior defense against quantum threats while maintaining practical effectiveness for real-world applications such as cloud security, 6G networks, and the Internet of Things.