Quantum

Surfshark Adds ML-DSA Authentication to Post-Quantum WireGuard

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 08/10/2026, 14:19:25 UTC.

Briefings

Surfshark has integrated ML-DSA certificate authentication into its WireGuard protocol, completing its post-quantum security architecture alongside ML-KEM encryption. This implementation is currently available on iOS and macOS, with support for other platforms planned. Unlike AWS and Google Cloud KMS, which have deployed ML-DSA in cloud services, Surfshark's consumer-facing software remains the first to enable ML-DSA authentication for WireGuard, addressing the 'forgotten' authentication pillar of post-quantum security.

Key points

• Surfshark has completed the integration of ML-DSA certificate authentication into its WireGuard protocol, combining it with ML-KEM encryption to form a fully post-quantum secure implementation.
• The protocol is currently accessible on iOS and macOS, with support for additional platforms planned for future releases, whereas ML-DSA authentication remains limited to cloud key-management platforms like AWS and Google Cloud KMS.

Context and limitations

Coverage is limited to the initial release on iOS and macOS; support for additional platforms is planned but not yet confirmed. The evaluation of 15 analyzed services shows ML-DSA deployment is restricted to cloud services, with no consumer applications currently implementing it.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 09/10/2026, 06:30:40 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeihjp2ockkzqiafvk3azheyqr2nm36synxjvjzc6oz3ed5oa55aycu