Hybrid key establishment
X25519 and ML-KEM shared secrets are combined through HKDF into a single session key, giving defence in depth against breaks in either algorithm.
Network & Transport Layer
Elvas QVPN
Quantum-Safe VPN
Protects data in transit from interception, man-in-the-middle and harvest-now-decrypt-later attacks. QVPN combines X25519 with ML-KEM in a hybrid key exchange, so a tunnel stays secure as long as either the classical or the post-quantum component holds.
# Site-to-site tunnel · hybrid post-quantum
tunnel: hq-to-datacenter
mode: ikev2 # RFC 9370 multiple key exchanges
key_exchange:
- x25519
- ml-kem-768 # FIPS 203
authentication:
algorithm: ml-dsa-65 # FIPS 204
hybrid_chain: ecdsa-p384
data_plane: aes-256-gcm
rekey_interval: 1h # fresh PQ shared secretOverview
The problem QVPN solves
Every VPN in use today depends on RSA or elliptic-curve Diffie-Hellman to agree session keys. An adversary who records that handshake now can recover the keys, and every byte of the tunnel, once a cryptographically relevant quantum computer exists.
Threats mitigated · MITRE ATT&CK
T1040Network sniffingT1557Adversary-in-the-middleT1562.010Downgrade attack
Technical specifications
- Key exchange
- X25519 + ML-KEM-768 / ML-KEM-1024
- Authentication
- ML-DSA-65 / ML-DSA-87, hybrid chains
- Protocols
- IKEv2 multiple key exchanges (RFC 9370), hybrid TLS 1.3
- Data plane
- AES-256-GCM, ChaCha20-Poly1305
- Topologies
- Site-to-site, remote access, mesh
- CNSA 2.0 profile
- ML-KEM-1024 + ML-DSA-87 + AES-256
Architecture
Hybrid post-quantum handshake
Capabilities
Built for security teams, engineered for scale
Post-quantum forward secrecy
Ephemeral ML-KEM keys on every rekey mean a compromised long-term key never exposes past sessions.
PQ authentication
ML-DSA certificate chains, with hybrid ECDSA chains for interoperability with existing PKI.
Downgrade protection
Policies pin hybrid suites, and any attempt to negotiate a quantum-vulnerable suite is blocked and logged.
Crypto-agile policy
Algorithm suites are defined centrally and rotated across the fleet without redeploying endpoints.
Security telemetry
Tunnel, handshake and policy events are exported for SIEM correlation and audit.
Use cases
Where QVPN protects you
Data-centre interconnect
Protect replication and backup links whose contents must stay confidential for decades.
Branch & site-to-site
Replace legacy IPsec tunnels between offices, plants and regional hubs with hybrid PQ tunnels.
Remote access
Give staff and contractors quantum-safe access to internal systems from any location.
See Elvas QVPN in action
Book a technical demonstration with our engineers and discuss your deployment.