1

Should I trust VPN services that provide post-quantum encryption like NewHope for protection against future quantum computers? How can I tell if the connection between me and the VPN is using post-quantum encryption?

  • 2
    Why do you need protection today against something that doesn't exist yet? – schroeder Jan 21 at 16:06
  • 4
    Anyone can store your data today and decrypt it when Quantum computer will be available. Quantum calculations will be available to the general public and hackers might be able to use this fact to break our encryption and have access to our data. I know I am quite paranoid but I prefer to be safe than sorry. – Eleanor Jan 21 at 16:23
  • Quantum computing is at such an immature level that I would have grave doubts of anyone outside of a specialty research lab making such claims, and even a research lab should be taken with a block of salt. – user10216038 Jan 21 at 17:05
  • Wouldn't the answer be 'no' inherently? How can they claim protection against something that hasn't been developed yet? Are they using algorithms that are theoretically, mathematically safe against quantum computers, probably. Are they armed against every future quantum development? Unlikely, if even possible. Just remember, even md5 used to be cryptographically secure. – Nomad Jan 21 at 17:07
  • 2
    @Nomad The limitations of quantum computers are based on mathematics, which are well established. It's possible to develop public key algorithms that are strong against quantum computers. Flaws in the encryption algorithm itself aren't really relevant. – Steve Sether Jan 21 at 17:25
1

It seem a but premature to make a VPN decision based on post quantum protection considerations, at this time. I think much more important questions would be, company reputation and past actions. None/few of the major trusted VPN providers, I see have that as a feature and my speculation is that any services using the new crypto is likely still experimental, Microsoft just began looking into it about year and a half ago.

In summary, I would not use post-Quantum Crypto at the moment, and re-evaluate in the future.

To evaluate traffic from a vpn, you need to review your network traffic. I would start by looking into wire shark.

| improve this answer | |
  • I am choosing a VPN mainly for the post quantum protection and it doesn't seems like I have a better chance for post-quantum protection. – Eleanor Jan 21 at 18:04
  • 1
    @Eleanor If that is the case, you will need to choose a vpn with post quantum offerings and hope for the best. However, a bad vpn can be worse then no vpn, as a vpn provider will have the ability log activity and have software in your pc/network. Additionally a vpn provider is not end to end so a portion of the traffic is still encrypted with standard encryption. AKA the post quantum vpn will provide limited protection at best from the kind of attackers who store data and run on quantum computer later (Nation State?). – Anthony T Jan 21 at 18:36
  • @Eleanor. It may be better to evaluate what data is being sent over the wire instead. If the data is truly that valuable, don't send over internet, or send via secure postage in temper evident system/self destructing dives, etc... – Anthony T Jan 21 at 18:40
  • There is a risk but with post-quantum VPN I have a protection against hackers/criminals that actually know where I live(they record my WI-FI connection) and the VPN would be much easier to find if they do anything with my data and they will be the main suspects. If someone record my WI-FI today and decrypt it several years from now it will be much harder to find him. – Eleanor Jan 21 at 19:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.