rosenpass/rosenpass

Health v2 · maintenance only

Adoption not part of the score

1401 stars · 135 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Rosenpass is a post-quantum-secure key exchange tool written in Rust that establishes symmetric keys and feeds them to WireGuard via its pre-shared key mechanism, yielding a quantum-resistant VPN. It includes the rosenpass tool, an rp frontend for easy VPN setup, and a formally analyzed protocol specification.

Use cases

• set up a VPN that resists quantum computer attacks
• add post-quantum security to an existing WireGuard tunnel
• exchange symmetric keys securely between two hosts
• run a quantum-safe VPN on Linux servers
• integrate post-quantum key exchange with other tools via standalone key files

When to choose

• you already use WireGuard and want hybrid post-quantum security
• you need a formally verified, pentested key exchange protocol
• you prefer a memory-safe Rust implementation

When to avoid

• you need a full-featured VPN with GUI or mobile clients
• you cannot run tools as root or manage WireGuard interfaces
• you need Windows or broad platform support

Facets

cli-tool · maturity active

cryptography security networking cli security privacy networking censorship-circumvention cli cross-platform vpn wireguard post-quantum key-exchange liboqs rust linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rosenpass/rosenpass")