[Pqc] Re: PQC integration in IPsec/IKEv2 - implementation ex perience and interop

--===============2253962042479474092==
Content-Type: multipart/alternative; boundary="000000000000f1730c065214c38a"

--000000000000f1730c065214c38a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Matt,

We have an IPsec/IKEv2 client for remote-access VPN supporting a number
RFCs (including drafts) related to post-quantum cryptographic deployment.
However, our client doesn't support PPK.

For interop, we could do it via NIST NCCoE PQC Migration to PQC
<https://www.nccoe.nist.gov/applied-cryptography/migration-to-pqc>.
Microsoft is already a consortium member, so it should be pretty
straightforward.

Best regards,
CJ




On Sat, 16 May 2026 at 10:12, Matt Ige <Matthew.Ige=3D
[email protected]> wrote:

> Hi,
> I=E2=80=99m reaching out to understand how others are approaching the int=
egration
> of post-quantum cryptography (PQC) into their IPsec/IKEv2 implementations=
.
>
> We are currently looking at the CNSA 2.0 IPsec profile draft as a
> reference:
> https://datatracker.ietf.org/doc/draft-guthrie-cnsa2-ipsec-profile
>
> I have a couple of specific questions:
> 1. Beyond what is outlined in this draft, are there additional
> requirements, design considerations, or extensions that implementations a=
re
> incorporating in practice?
> 2. Are there organizations actively implementing PQC for IPsec that would
> be interested in interoperability testing or collaboration?
>
> We are actively working on our implementation and are particularly
> interested in ensuring alignment with emerging standards and ecosystem
> compatibility. I appreciate any insights or pointers.
>
> Thanks,
>
> Matt
> --
> Pqc mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>

--=20

PQ Solutions Limited (trading as =E2=80=98Post-Quantum=E2=80=99) is a priva=
te limited=20
company incorporated in England and Wales with=C2=A0registered number 06808=
505.
=C2=A0

This email is meant only for the intended recipient. If you have received=
=20
this email in error, any review, use, dissemination,=C2=A0distribution, or=
=20
copying of this email is strictly prohibited. Please notify us immediately=
=20
of the error by return email and please=C2=A0delete this message from your=
=20
system. Thank you in advance for your cooperation.


For more information=20
about Post-Quantum, please visit www.post-quantum.com=20
<http://www.post-quantum.com>.

In the course of our business relationship,=20
we may collect, store and transfer information about you. Please see our=20
privacy=C2=A0notice at www.post-quantum.com/privacy-policy/=20
<http://www.post-quantum.com/privacy-policy/>=C2=A0to learn about how we us=
e=20
this information.

--000000000000f1730c065214c38a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">Hi Matt,<div><br></div><div>We have an IP=
sec/IKEv2 client for remote-access VPN supporting a number RFCs (including =
drafts) related to post-quantum cryptographic deployment. However, our clie=
nt doesn&#39;t support PPK.</div><div><br></div><div>For interop, we could =
do it via <a href=3D"https://www.nccoe.nist.gov/applied-cryptography/migrat=
ion-to-pqc">NIST NCCoE PQC Migration to PQC</a>. Microsoft is already a con=
sortium member, so it should be pretty straightforward.</div><div><br></div=
><div>Best regards,</div><div>CJ</div><div><br></div><div><br></div><div><b=
r></div></div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=
=3D"ltr" class=3D"gmail_attr">On Sat, 16 May 2026 at 10:12, Matt Ige &lt;Ma=
tthew.Ige=3D<a href=3D"mailto:[email protected]">40microsoft.c=
[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote"=
 style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);p=
adding-left:1ex"><div class=3D"msg721547209908517616">




<div dir=3D"ltr">
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Hi,</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
I=E2=80=99m reaching out to understand how others are approaching the integ=
ration of post-quantum cryptography (PQC) into their IPsec/IKEv2 implementa=
tions.</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
We are currently looking at the CNSA 2.0 IPsec profile draft as a reference=
: <a href=3D"https://datatracker.ietf.org/doc/draft-guthrie-cnsa2-ipsec-pro=
file" target=3D"_blank">https://datatracker.ietf.org/doc/draft-guthrie-cnsa=
2-ipsec-profile</a></div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
I have a couple of specific questions:</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
1. Beyond what=C2=A0is outlined in this draft, are there additional require=
ments, design considerations, or extensions that implementations are incorp=
orating in practice?</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
2. Are there organizations actively implementing PQC for IPsec that would b=
e interested in interoperability testing or collaboration?</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
We are actively working on our implementation and are particularly interest=
ed in ensuring alignment with emerging standards and ecosystem compatibilit=
y. I appreciate any insights or pointers.</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div id=3D"m_-6426517278314886367Signature">
<p style=3D"margin:0in;font-family:Calibri,sans-serif;font-size:11pt">
Thanks,</p>
<p style=3D"margin:0in;font-family:Calibri,sans-serif;font-size:11pt">
Matt</p>
</div>
</div>

-- <br>
Pqc mailing list -- <a href=3D"mailto:[email protected]" target=3D"_blank">pqc@i=
etf.org</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]" targe=
t=3D"_blank">[email protected]</a><br>
</div></blockquote></div></div>

<br>
<div style=3D"font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><hr><=
/div><div><font face=3D"Arial, Helvetica, sans-serif"><span style=3D"font-s=
ize:13px">PQ Solutions Limited (trading as =E2=80=98Post-Quantum=E2=80=99) =
is a private limited company incorporated in England and Wales with=C2=A0</=
span></font><span style=3D"font-size:13px;font-family:Arial,Helvetica,sans-=
serif">registered number 06808505.</span></div><div><span style=3D"font-siz=
e:13px;font-family:Arial,Helvetica,sans-serif">=C2=A0</span></div><div><fon=
t face=3D"Arial, Helvetica, sans-serif"><span style=3D"font-size:13px">This=
 email is meant only for the intended recipient. If you have received this =
email in error, any review, use, dissemination,=C2=A0</span></font><span st=
yle=3D"font-size:13px;font-family:Arial,Helvetica,sans-serif">distribution,=
 or copying of this email is strictly prohibited. Please notify us immediat=
ely of the error by return email and please=C2=A0</span><span style=3D"font=
-size:13px;font-family:Arial,Helvetica,sans-serif">delete this message from=
 your system. Thank you in advance for your cooperation.</span></div><div><=
span style=3D"font-size:13px;font-family:Arial,Helvetica,sans-serif"><br></=
span></div><div><font face=3D"Arial, Helvetica, sans-serif"><span style=3D"=
font-size:13px">For more information about Post-Quantum, please visit <a hr=
ef=3D"http://www.post-quantum.com" target=3D"_blank">www.post-quantum.com</=
a>.</span></font></div><div><font face=3D"Arial, Helvetica, sans-serif"><sp=
an style=3D"font-size:13px"><br>In the course of our business relationship,=
 we may collect, store and transfer information about you. Please see our p=
rivacy=C2=A0</span></font><span style=3D"font-size:13px;font-family:Arial,H=
elvetica,sans-serif">notice at <a href=3D"http://www.post-quantum.com/priva=
cy-policy/" target=3D"_blank">www.post-quantum.com/privacy-<wbr>policy/</a>=
=C2=A0to learn about how we use this information.</span></div>
--000000000000f1730c065214c38a--


--===============2253962042479474092==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gClBxYyBtYWlsaW5nIGxpc3QgLS0gcHFjQGlldGYub3JnClRvIHVuc3Vic2NyaWJlIHNlbmQg
YW4gZW1haWwgdG8gcHFjLWxlYXZlQGlldGYub3JnCg==

--===============2253962042479474092==--