Quantropi QiSpace SEQUR PPK Generator is a browser extension and web-based tool that generates Post-quantum Preshared Keys (PPKs) for use in IPsec VPN configurations compliant with the IETF RFC 8784 standard. The tool addresses the "Harvest Now, Decrypt Later" (HNDL) threat, where adversaries intercept and store encrypted traffic today with the intent to decrypt it once quantum computers become capable of breaking classical cryptographic algorithms. How it works: - PPKs are generated using Quantropi's hardware-based Quantum Random Number Generators (QRNGs), providing 32 bytes / 256 bits of entropy to meet NIST Category 5 security level - The generated PPKs are distributed out-of-band to each peer in an IKEv2 IPsec VPN session - PPKs are "mixed" with classical Diffie-Hellman (DH) key exchange material during session establishment - The PPK itself is never transmitted over the VPN connection; only its Key ID is exchanged - This ensures that even if the classical DH key exchange is compromised (e.g., via Shor's algorithm), the PPK component keeps the session encryption secure Deployment process: - Install the browser extension (available for Chrome, Edge, and Firefox) - Request a security token via an online form - Activate the extension and configure PPKs on each IPsec VPN peer The tool is independent of NIST Post-Quantum Cryptography (PQC) standardization timelines and requires no additional network infrastructure or significant added latency. It is part of Quantropi's broader QiSpace platform, which also includes MASQ (asymmetric encryption) and QEEP (symmetric encryption) components.