Future Quantum Computers Could Hijack VPN Sessions, Surfshark Warns
Quantum computers could one day hijack a VPN session by impersonating the server at the exact moment a user connects, Surfshark warns. The provider says it has closed that gap with what it calls the first full post-quantum WireGuard implementation.
The fix pairs ML-KEM key exchange with ML-DSA certificates for authentication. Surfshark says authentication is the step many companies, including Big Tech, have hesitated on.
Quantum Computers Could Enable VPN Session Takeover, Surfshark Says
Karolis Kaciulis, Leading System Engineer at Surfshark, said ignoring authentication creates a vulnerability once quantum computers become accessible. He called authentication the “forgotten” step in post-quantum security.
“Without post-quantum authentication, a quantum computer could simply perform a session takeover, impersonating the server at the very moment you connect,” Kaciulis explained.
Kaciulis acknowledged that quantum computing poses no immediate threat today. But he said delaying authentication security until those machines emerge leaves connections vulnerable.
Surfshark Adds ML-DSA to WireGuard Post-Quantum VPN Security
Kaciulis said a truly full post-quantum secure VPN rests on three pillars: encryption, key exchange and authentication. He said many companies hesitate on authentication because post-quantum certificates are difficult to scale.
Surfshark previously announced post-quantum WireGuard protections, including ML-KEM key exchange. The company then added ML-DSA certificates, which it says completes the final pillar and delivers the first full post-quantum WireGuard implementation.
According to Surfshark, an evaluation of 15 widely used applications and platforms, including Google, AWS and Cloudflare, found 8 have integrated ML-KEM while only 2 have deployed ML-DSA. Both are cloud key-management platforms: Google Cloud KMS and AWS KMS.
There, ML-DSA is an optional signing capability that clients must configure manually. Apple offers ML-DSA to developers and Microsoft has built it into Windows, but the evaluation found neither has enabled it in Safari, iMessage, Edge or Microsoft 365.
WireGuard with full post-quantum implementation is available to iOS and macOS users. Surfshark plans support for additional platforms in future releases.
- Future Quantum Computers Could Hijack VPN Sessions, Surfshark Warns - October 11, 2026
- Cardinals Fans Swear a Lot, Yet Rank Second-Most Positive in NFL - October 11, 2026
- Inside the Mystery Trading Firm Run by Two Mathletes Betting Big on the Future - October 4, 2026
