mullvad/oqs-rs — explained in plain English
Analysis updated 2026-08-08 · repo last pushed 2020-10-12
Add quantum-resistant encryption to a Rust networking or security tool.
Exchange post-quantum cryptographic keys using a JSON-based server and client.
Negotiate a quantum-safe pre-shared key over a Wireguard VPN tunnel.
Study how a privacy-focused VPN company approached post-quantum security.
| mullvad/oqs-rs | dicklesworthstone/frankensim | sergiobenitez/ubyte | |
|---|---|---|---|
| Stars | 36 | 36 | 36 |
| Language | Rust | Rust | Rust |
| Last pushed | 2020-10-12 | — | 2023-10-02 |
| Maintenance | Dormant | — | Dormant |
| Setup difficulty | moderate | hard | easy |
| Complexity | 3/5 | 5/5 | 2/5 |
| Audience | developer | researcher | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires building liboqs from source and linking it with Rust, plus the project is archived and unmaintained.
This repository provides Rust tools for experimenting with quantum-resistant cryptography, encryption designed to stay secure even if future quantum computers break today's standard encryption. It was built by Mullvad, a privacy-focused VPN company, to explore how to make VPN tunnels resistant to quantum attacks. However, the README notes clearly that these bindings are no longer maintained, pointing to a newer official project as the replacement. The project includes several pieces. One provides low-level connections to liboqs, a library of post-quantum cryptographic algorithms. Another wraps those into higher-level Rust code that's easier to work with. There's also a server and client for exchanging cryptographic keys using JSON-based communication. Finally, there's a tool specifically for negotiating a pre-shared key over a Wireguard tunnel, a common VPN protocol, so that tunnel can be upgraded to post-quantum security. The intended users are developers building networking or security tools in Rust who want to add quantum-resistant encryption to their projects. The most concrete example from the README is Mullvad's own use case: establishing a post-quantum-safe pre-shared key over an existing Wireguard VPN connection. Someone building similar privacy infrastructure might have used this as a reference or starting point. Since this is archived and unmaintained, it's mainly useful as a historical reference rather than something to build on today. The README doesn't go into detail about which specific quantum-resistant algorithms are supported or how the key exchange protocols work under the hood. Those interested in the current state of the project would want to look at the replacement repository it points to.
Rust tools for experimenting with quantum-resistant cryptography, built by Mullvad to explore post-quantum VPN security. Archived and unmaintained, now mainly useful as a historical reference.
Mainly Rust. The stack also includes Rust, liboqs, Wireguard.
Dormant — no commits in 2+ years (last push 2020-10-12).
No license information was mentioned in the README, so the licensing terms are unknown.
Setup difficulty is rated moderate, with roughly 1h+ to a first successful run.
Mainly developer.
This repo across BitVibe Labs
Verify against the repo before relying on details.