Adding a post-quantum hybrid handshake to a Rust VPN

<p><a href="https://github.com/litvinovtd/qeli" rel="noopener noreferrer">Qeli</a> is an open-source VPN you run on your own server. No third-party service, no account with

<p><a class="article-body-image-wrapper"

<p>Most production stacks are running RSA and ECC in a dozen places the developer didn't consciously choose — a cloud provider default, an npm package, a library that made the

<p>Every few months someone asks me when quantum computers will break RSA.</p> <p>I have stopped answering that question, because it is not the question engineering teams actually

<p>Right now, someone could be copying your encrypted traffic off the wire and storing it. They can't read it. The TLS session protecting your database credentials, your API

<p><em>Bonus post in the <a href="https://github.com/matutetandil/anyhide" rel="noopener noreferrer">Anyhide</a> series. The original 6-post arc closed in July; this post is about

<p>Protecting data that must stay secret ten years from now is a <strong>problem for today</strong>: an adversary can capture your encrypted traffic now and decrypt it once