NordVPN Introduces Post-Quantum Encryption For Linux Users

NordVPN has rolled out post-quantum encryption support for its Linux application. According to the company, this update is part of NordVPN’s effort to address potential cybersecurity risks associated with quantum computing​.

As Marijus Briedis, CTO of NordVPN, explains, “With this launch, we start a major transition to new-generation encryption of all our applications, providing long-term security for our users.”

NordVPN has implemented post-quantum encryption using the ML-KEM (formerly known as CRYSTALS-Kyber) algorithm, a NIST-approved cryptographic standard designed to resist attacks from quantum computers. Specifically, NordVPN uses a hybrid approach within its NordLynx protocol, which combines classical encryption with quantum-resistant cryptography to enhance security.

The implementation begins with a standard WireGuard session, followed by a post-quantum key exchange using ML-KEM. This layered encryption aims to protect user data against future quantum decryption capabilities.

Quantum computing, though still in development, is expected to eventually surpass traditional computers in decryption capabilities, rendering current encryption methods obsolete.

“Cybercriminals may already be intensifying what is known as ‘harvest now, decrypt later’ attacks,” Briedis stated. “Simply put, they are trying to accumulate huge quantities of encrypted data and decrypt them once quantum technology is developed.”​

While currently only available in its Linux apps, NordVPN will gradually expand post-quantum encryption across all its platforms. Implementation of post-quantum encryption is a complex and resource-intensive task.

Briedis emphasized the importance of this phased approach: “These technical challenges are the reason for the gradual implementation of post-quantum cryptography support to our applications. We want to be completely sure that we will keep the highest level of user experience in terms of connection time and speed during the transition.”​

NordVPN joins ExpressVPN as one of only a handful of consumer VPNs with post-quantum encryption.

In related news, NordVPN has recently made some of its products open source in an effort to improve transparency. Furthermore, NordVPN has released a free tool to scan files for malware, further expanding its commitment to security.