Surfshark completes post-quantum WireGuard with ML-DSA authentication
Surfshark says its full post-quantum WireGuard implementation is live on iOS, macOS and Windows, adding ML-DSA certificates for server authentication.
Surfshark announced it has completed a full post-quantum WireGuard implementation, integrating ML-DSA certificates into the protocol for server authentication. The implementation is currently live on iOS, macOS and Windows, according to TechRadar.
WireGuard is the VPN protocol Surfshark uses for its connections; ML-DSA is a post-quantum signature scheme used here to authenticate servers rather than to encrypt traffic itself. Surfshark said support for additional platforms will arrive in future releases.
Earlier post-quantum work
Earlier this year, Surfshark rolled out post-quantum encryption and key exchange using ML-KEM to WireGuard, and it previously launched Dausos, its proprietary VPN protocol built with full post-quantum security from the ground up.
The company has also published an evaluation of 15 major tech platforms, finding that only AWS KMS and Google Cloud KMS had deployed ML-DSA. NordVPN, meanwhile, extended post-quantum protection across its applications.
Quick answers
Which platforms support Surfshark's post-quantum WireGuard?
Surfshark says the full post-quantum WireGuard implementation is live on iOS, macOS and Windows, with more platforms planned in future releases.
What does ML-DSA do in Surfshark's WireGuard implementation?
ML-DSA certificates are used for server authentication within the WireGuard protocol.
Has Surfshark added post-quantum features before?
Yes. Earlier this year it rolled out post-quantum encryption and key exchange (ML-KEM) to WireGuard, and it previously launched Dausos, its own post-quantum VPN protocol.