Rosenpass: Hardening the Internet Against Quantum Computer Attacks

In the future, it may very well be adapted to other key elements of today’s internet security, preserving trust and safety in the coming quantum era. Sixty percent of the resources went toward security analysis of the protocol in the symbolic model using proverif. Rosenpass provides a complement to the well-recognized VPN protocol WireGuard, adding quantum-hardened cryptography and key exchange while keeping the established WireGuard-standard encryption security. Therefore, Rosenpass is not just an add-on or a plug-in, but a coprocessing software that interacts with WireGuard at exactly one point, enhancing WireGuard's predefined key generation and exchange process with Post Quantum Secure (PQS) cryptography, based on the McEliece cryptosystem. Project Rosenpass is run by a team of cryptographers, researchers, open source developers, hackers and designers with a focus on verifiable security improvement, usability and user advantage. Rosenpass is funded through the NGI Assure Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet) programme.