This site is fictional demo content. It is not real news or affiliated with any real organization. Do not treat it as fact or professional advice.

NextPaper Logo
nextpaper.ccCYBER CHRONICLE
RSS
EN中文

Full article

FULL TEXT

View this issue
HeadlineINTERNET

Post-Quantum Encrypted Internet AegisNet Goes Live: A New Generation of Internet Security Protocols Impervious to Quantum Computers

The IETF has formally approved the AegisNet post-quantum encrypted internet protocol based on NIST-standardized lattice cryptography algorithms, with 38 of the top 50 global cloud service providers having completed migration, marking the internet's entry into the post-quantum security era

Post-Quantum Encrypted Internet AegisNet Goes Live: A New Generation of Internet Security Protocols Impervious to Quantum Computers

The Internet Engineering Task Force (IETF) today formally approved the AegisNet post-quantum encrypted internet protocol standard. The protocol is based on the CRYSTALS-Kyber and CRYSTALS-Dilithium lattice cryptography algorithms, which NIST finalized in 2029, designed to replace the widely used RSA and ECC encryption systems and resist future quantum computer attacks.

AegisNet's core design principle is "crypto agility" — the protocol supports dynamically switching encryption algorithms without interrupting connections. If a particular algorithm is found to have a vulnerability in the future, the server can seamlessly switch to another algorithm within a single handshake, completely transparent to the user.

John Gilmore, Co-Chair of the IETF AegisNet Working Group and Vice President of Security at Cloudflare, said: "Quantum computers may still be 5 to 10 years away from breaking RSA-2048, but encrypted traffic intercepted today can be stored and decrypted in the future — this is the so-called 'harvest now, decrypt later' threat. AegisNet addresses this imminent problem."

On the migration front, 38 of the world's top 50 cloud service providers have completed AegisNet compatibility upgrades. Google, Microsoft, and Amazon's cloud services have enabled post-quantum encryption by default. Apple has built an AegisNet client into iOS 20 and macOS 20. All three major browsers — Chrome, Safari, and Firefox — now support it.

On technical performance, AegisNet's key exchange handshake time increases by approximately 15 milliseconds compared to traditional ECDHE, and key sizes grow by about 800 bytes. For most application scenarios, this overhead is negligible. In high-concurrency scenarios, AegisNet reduces additional latency to within 3 milliseconds through session reuse and key caching.

However, migration has not been painless. A large number of legacy IoT devices lack the computing power to run lattice cryptography algorithms. NIST has developed a dedicated lightweight post-quantum algorithm, NTRU+, for this purpose. Additionally, some enterprise intranet applications rely on hard-coded RSA certificates, requiring migration on a case-by-case basis.

Professor Wang Xiaoyun, Director of the State Key Laboratory of Information Security at the Chinese Academy of Sciences, commented: "The standardization of AegisNet is the most important event in the history of cryptography since AES. It marks the formal entry of global internet infrastructure into the post-quantum security era."