QUIC and Post-Quantum Cryptography

Post-quantum cryptography is an effort to keep digital information secure as computing capabilities change. Its algorithms run on ordinary computers and are designed to withstand attacks from both conventional and future quantum computers. It is becoming part of the software and standards that protect everyday communication. ¹

The concern is specific: a sufficiently powerful quantum computer could solve some of the mathematical problems behind the public-key cryptography we use to establish secure connections and prove identity. Post-quantum cryptography replaces those vulnerable building blocks with alternatives designed to resist that threat. ²

This work has moved into practical adoption. NIST finalized its first three post-quantum standards in 2024, covering the establishment of shared secrets and digital signatures. Those standards give software developers a common foundation for bringing the protection into existing systems. ³

Why it matters beyond specialist systems

Quantum computing can seem distant from the concerns of an application developer or someone operating a network. The connection becomes clearer when we consider how long information needs to remain private. A network connection may last seconds; the information it carries may remain sensitive for decades.

An attacker can record encrypted traffic today and retain it in the hope of decrypting it with future capabilities. This is often called harvest now, decrypt later. The timing of a capable quantum computer remains uncertain, but protecting information with a long confidential lifetime requires decisions before that machine arrives. ²

Medical records, private correspondence, unpublished research and confidential business plans illustrate why this concern reaches beyond a small set of specialist systems. Their value or sensitivity can persist long after transmission. Upgrading a connection years later cannot retrieve copies of traffic already collected by someone else.

The urgency varies by application. Some data quickly loses its sensitivity; other data must remain protected through several generations of hardware and software. Networks also take time to replace. Post-quantum security gives operators another way to match the protection they provide to the lifetime of the information entrusted to them.

A path through QUIC

QUIC is a transport protocol for secure network communication. It integrates TLS 1.3, the security protocol responsible for authenticating peers and establishing the secrets used to protect a connection. This gives improvements in TLS cryptography a route into QUIC applications.

One practical approach is hybrid key agreement. It combines an established method with a post-quantum method when a connection is created. The combination is designed to keep the resulting secret secure if at least one of its components remains secure. Published TLS standards now define these exchanges, giving implementations a shared way to support them. ⁴

This matters at the application level. A transport can adopt a standardized exchange through its TLS library while preserving the way applications send and receive data. Developers can build on reviewed protocols and cryptographic libraries, concentrating their own work on how the capability fits their users’ requirements.

There is still a distinction between protecting the connection’s secrets and proving the identity of the other endpoint. Hybrid key agreement addresses the former. Migrating certificate signatures and authentication is another part of the wider post-quantum transition. ²

What the research tells us

Research into QUIC and post-quantum cryptography explores both whether this integration works and what it costs under different network conditions. The 2024 paper A Quantum of QUIC demonstrated integration through a TLS library without major changes to the QUIC libraries. It also identified difficulties associated with larger handshake messages and implementation limits. The work showed the value of QUIC’s existing security foundation while making clear that deployment still requires engineering. ⁵

A 2026 study in Computer Networks compared post-quantum connection establishment in TLS and QUIC under simulated delay and packet loss. QUIC was less sensitive to adverse conditions overall in those experiments, though the results depended on the algorithms and configuration. The studies used particular implementations and test environments; their findings are reasons to evaluate a deployment on its own network, rather than promises of a universal performance advantage. ⁶

The practical lesson is that cryptography and transport need to be considered together. A new exchange can require more data during connection setup. How much that matters depends on bandwidth, delay, loss and how often connections are established. Research helps identify those tradeoffs and improve the libraries that applications share.

Deployment is progressing alongside that research. Cloudflare already documents hybrid post-quantum key agreement for incoming TLS connections, including QUIC. That is a concrete example of the technology entering ordinary network infrastructure. ⁷

What this means for qlinq

qlinq has native support for post-quantum cryptography, using standardized hybrid key agreement within its QUIC transport. Deployments carrying information that must remain confidential for years can require that protection. This illustrates the value of building on shared protocols: advances in transport security can become practical capabilities for the applications that need them. ⁸

For a user moving short-lived data, post-quantum protection may not be the deciding feature. For someone carrying sensitive information that needs to stay private for many years, it can be a meaningful requirement. Supporting both is part of building a useful transport foundation.

References