Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems. Learn more →
Rosenpass Alternatives
Similar projects and alternatives to rosenpass
-
-
InfluxDB
InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.
-
-
-
rocq
The Rocq Prover is an interactive theorem prover, or proof assistant. It provides a formal language to write mathematical definitions, executable algorithms and theorems together with an environment for semi-interactive development of machine-checked proofs.
-
-
-
-
CodeRabbit
CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
-
-
-
getssl
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
-
desktop-app
A powerful WireGuard client for Windows with advanced split tunneling and an intuitive, user-friendly interface.
-
pq-adapter-mullvad
Go utility for upgrading pre-quantum Mullvad peers to their post-quantum counterparts
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
rosenpass discussion
rosenpass reviews and mentions
-
PQConnect – a new easy-to-install layer of Internet security from DJB, Lange
There are a number (or just one? Mullvad) of commercial VPN providers that provide an optional PQC layer, and that fact is referenced on this project's page.
There is also VPN software that incorporates PQC (also referenced): https://rosenpass.eu
What this project attempts to do is to establish a PQC stream between any two peers end-to-end (in most situations one of the peers will be a server). This is an important difference as a VPN expects a network-protocol (eg. IP) tunnel of some sort to flow across.
-
Let's Encrypt is 10 years old now
I agree that centralization is bad, and one of the worst parts of HTTPS (the other being that things like ed22519 systems, chacha20, poly1305, sntrup are generally viewed as better modern alternatives to AES, so postquantum system like rosenpass https://github.com/rosenpass/rosenpass are more preferable).
However, I think there is no reason at all that a system that is decentralized is not far _far_ simpler to instantiate for a user (not to mention far more secure and private). Crypto gets a lot of hate on HN, but it seems that it is mostly due to people's dislike of anything dealing with 'currency' systems or financial that touch it. This is a despised opinion here, but I am still actually excited for crypto systems that solve real world problems like TLS certs, DNS, et al.
Iroh seems like a _fantastic_, phenomenal system to showcase this idea. It allows for a very fast decentralized web experience on modern cryptography such as Blake3, QUIC, and so on but doesn't really touch any financial stuff at all. Its simply a good system.
I hope we can slowly move to a system that uses the decntralized consensus algorithms created in the crypto space to remove the trust in (typically big, corporate, and likely backdoored) centralized entities that our system today _requires_ without any alternative.
-
Randomness extractors: making fair coins out of biased coins
[^9]: https://en.wikipedia.org/wiki/Security_of_cryptographic_hash...
---
I am the main author of the Rosenpass[^10] post-quantum secure key exchange for WireGuard. My expertise comes from developing this protocol, as well as a couple of years of engagement with the real-world cryptography community and from my own scientific research on cryptography and secure implementations of cryptography.
[^10]: https://rosenpass.eu/
-
Rosenpass – formally verified post-quantum WireGuard
They verified the protocol, not the actual implementation: https://github.com/rosenpass/rosenpass#security-analysis
This is still a pretty neat result! End-to-end proofs from high level protocol to low level implementation are mostly still a research topic.
-
A note from our sponsor - InfluxDB
influxdata.com | 29 Apr 2025
Stats
rosenpass/rosenpass is an open source project licensed under Apache License 2.0 which is an OSI approved license.
The primary programming language of rosenpass is Rust.