PQC WireGuard with wolfSSL, We Can Do That!

WireGuard and Headscale / Tailscale don’t use Post-Quantum Cryptography. Adversaries recording that traffic today will decrypt it when quantum hardware arrives. The wolfCrypt PQC ML-KEM and ML-DSA implementations are production-ready, and FIPS validation is in process. We’ve already integrated post-quantum key exchange into TLS, DTLS, SSH, and MQTT. WireGuard is next. The engineering path is […]