Re:PQConnect – Automated Post-Quantum End-to-End Tunnels fro...
by coppsilgold on Friday December 27, 2024 @04:58PM
(#42526454)
There are a number (or just one? Mullvad) of commercial VPN providers that provide an optional PQC layer, and that fact is referenced on this project's page.
There is also VPN software that incorporates PQC (also referenced): <https://rosenpass.eu>
What this project attempts to do is to establish a transparent PQC stream between client and server.
I'm not sure I like the way they are doing this, with a lot of magic (PQConnect inserts itself into the network stack to inspect incoming DNS responses) and with Python of all things.[1][2][3]
I think the best way to do this is to graft it on top of QUIC and not mess with linux network plumbing. Perhaps integrate it with something like <https://github.com/n0-computer/iroh>
There is also VPN software that incorporates PQC (also referenced): <https://rosenpass.eu>
What this project attempts to do is to establish a transparent PQC stream between client and server.
I'm not sure I like the way they are doing this, with a lot of magic (PQConnect inserts itself into the network stack to inspect incoming DNS responses) and with Python of all things.[1][2][3]
I think the best way to do this is to graft it on top of QUIC and not mess with linux network plumbing. Perhaps integrate it with something like <https://github.com/n0-computer/iroh>
[1] <https://www.pqconnect.net/pqconnect-20241206.pdf>
[2] <https://www.pqconnect.net/20241227.pdf>
[3] <https://github.com/jedisct1/pqconnect/tree/main/src/pqconnec...>