• NordVPN introduces post-quantum cryptography on Linux app.
• Update protects users from ‘harvest now, decrypt later’ attacks.

The race to prepare for the quantum computing era has begun in earnest, with NordVPN taking what it claims is a significant step forward. The VPN provider has announced the integration of post-quantum cryptography into its Linux application, marking one of the first practical implementations of the technology in the consumer VPN market. 

The move comes as cybersecurity experts warn at greater volume about the potential for quantum computers to break current encryption standards, potentially exposing vast amounts of sensitive data. While widespread quantum computing capabilities may still be years away, NordVPN’s initiative highlights the growing urgency in the tech industry to develop and deploy quantum-resistant security measures.

For context, harnessing the principles of quantum mechanics to perform calculations, quantum computing already shows the potential to surpass today’s fastest systems. It is predicted, for example, that quantum computers might be used to model molecules to help cure diseases like cancer, advance space exploration, and potentially break modern encryption protocols. 

However, it is inevitable that such superior processing powers can bring greater risks than those that we face today. Therefore, the cybersecurity industry’s challenge is to figure out how to get ahead of quantum computing’s enormous decryption capabilities. 

“To put it in perspective, today’s encryption methods like RSA can take traditional computers hundreds of years to crack, while quantum computers could bypass them in mere seconds,” NordVPN said, adding that such capabilities pose a serious threat to individuals, businesses, and governments. 

According to Marijus Briedis, CTO at NordVPN, “Cybercriminals may already be intensifying what is known as ‘harvest now, decrypt later’ attacks.” In simple terms, bad actors may currently be accumulating vast quantities of encrypted data, ready to decrypt them once quantum technology is developed.

Despite quantum computing being in development, proactive data protection is becoming increasingly important. Major tech companies, government agencies, and intelligence organisations are already preparing for quantum-enabled threats. NordVPN joins the trend by introducing post-quantum cryptography in its Linux app, marking its first step towards quantum-resistant security for sensitive user data.

The first post-quantum cryptography end-user app

Released in late September, the update to the Linux binary introduces post-quantum cryptography to the Nordlynx protocol, aligning with the latest NIST standards. The upgrade aims to protect Linux users from potential quantum decryption threats while also serving as a testbed for performance impact on connection times and speeds.

“With this launch, we start a major transition to new-generation encryption of all our applications, providing long-term security for our users,” Briedi explained. The company plans to use insights from the initial rollout to extend post-quantum cryptography support across its entire application suite on all platforms.

However, implementing post-quantum encryption is challenging. The process is complex and resource-intensive, often requiring larger key sizes and signatures, factors that can increase computational overhead. This could impact VPN speed and performance, especially in high-throughput environments. 

“These technical challenges are the reason for the gradual implementation,” Briedis noted. “We want to ensure the highest level of user experience in terms of connection time and speed during the transition.”

As the cryptographic landscape evolves, NordVPN is focusing on crypto-agility – the ability to swiftly adapt to new cryptographic standards. The company aims to position itself at the forefront of providing seamless and secure, quantum-resistant VPN connections as they become necessary.