Double-Encrypted.
Quantum-Resistant. Stateless.
Two independent encryption layers protect every byte in transit. The relay sees nothing. Quantum computers change nothing.
Break one layer, the other still holds.
Two Layers. Two Algorithms. Zero Overlap.
If either encryption layer is compromised, the other continues protecting your data independently.
Outer Layer: WireGuard
Inner Layer: PQ TLS 1.3
The Relay Sees Nothing.
The relay server forwards encrypted packets between peers. It holds zero encryption keys. If an attacker compromises the relay, they capture only opaque, encrypted data.
Harvest Now, Decrypt Later
Nation-states are recording encrypted traffic today, planning to decrypt it with quantum computers tomorrow. This is not theoretical; it is active intelligence doctrine.
Record
Adversaries capture and store encrypted traffic from fiber taps, compromised routers, and cloud providers.
Wait
They store petabytes of encrypted data, waiting for cryptographically relevant quantum computers (estimated 2030s).
QP Defeats This
Hybrid X25519 + ML-KEM-768 key exchange means even captured traffic remains encrypted against future quantum attacks.
Add in Seconds. Revoke Instantly.
Peer management is a single command. Add a peer, scan a QR code, connect. Revocation is immediate: the peer's keys are removed from the WireGuard configuration and reloaded in place.
Encrypt Everything.
Trust Nothing.
Double encryption. Stateless relay. Post-quantum key exchange. Network security that is ready for threats that do not exist yet.