The QiSpace SEQUR PPK Generator is an easy to install browser extension that delivers the strongest possible Post-quantum Preshared Keys (PPKs) – generated using quantum random sources. It’s used to configure any IPSec VPN that supports the IETF RFC 8784 standard to be quantum-secure. The PPK Generator browser extensions are now available in Edge, Chrome, and Firefox stores!
Protect against “Steal Now, Decrypt Later”
Quantum, AI, and Machine Learning threats to encryption are getting more sophisticated and accelerating. Pending NIST PQC standards will provide better protection and should be approved later this year, but their adoption will be a lengthy and complicated task. Luckily, there are immediate steps you can take TODAY to improve your security posture.
The IETF RFC 8784 standard defines a process for using out of band Post-Quantum Preshared Keys (PPKs) with IPSec VPNs to protect them from these advanced attacks. The RFC 8784 standard will negate compromises of the core key exchange by any mechanism as well as prevent “store now, decrypt later” threats.
What is RFC 8784?
IETF RFC 8784 “Mixing Preshared Keys in Internet Key Exchange Protocol Version 2 (IKEv2) for Post-quantum Security” is a mechanism to create IKEv2 IPSec VPN connections that are resistant to quantum attacks. This is accomplished by adding PPKs using an out-of-band mechanism to each side of the VPN. The PPKs are then “mixed” with the classic key material from the Diffie-Hellman (DH) key exchange process. The PPK itself is never transmitted over the connection – only the Key ID of the PPK is specified to identify the correct PPK to use in the key establishment.
IETF RFC 8784 is a global standard recommended by government agencies including NIAP, the NSA, and the German Federal Office for Information Security. It is independent of the NIST PQC approval timelines and can be implemented today with no additional network resources consumed or significant latency added.
Standards-based. Quantum-secure.
Your Palo Alto firewall delivers best-in-class performance and security to your network, but is it quantum-ready? Take it to the max with Quantropi’s QiSpace™ SEQUR PPK Generator.
The QiSpace SEQUR™ PPK Generator PPK Generator provides a direct integration to configure PPKs for Palo Alto Next-Generation Firewalls running PAN-OS 11.1 as well as support for any IPSec VPN with RFC 8784 functionality including products from Fortinet, Juniper, Cisco, Red Hat, and open source VPNs including strongSwan.
It takes less than five minutes to update your firewall with quantum PPKs according to the IETF standard, recommended by NIAP and the NSA.
Quantum-secure your IPSec VPN with PPK Generator in 3 easy steps:
Signup: Submit the form and receive a welcome email with instructions.
Install: Download the PPK Generator browser extension and add your unique token.
Configure: Add PPKs to each IPSec VPN peer.
Check out this video to learn more about the installation and use of QiSpace SEQUR™ PPK Generator
Protect against “steal now, decrypt later” attacks and start your journey to post-quantum security today!
Download Now!