#1118522 RFP: rosenpass -- post-quantum-secure VPN that uses WireGuard to transport the actual data

Package:
wnpp
Source:
wnpp
Submitter:
Georg Faerber
Date:
2025-11-29 16:59:39 UTC
Severity:
normal
#1118522#5
Date:
2025-10-21 14:50:23 UTC
From:
To:
Package name    : rosenpass
Version         : 0.2.2
Upstream Author : Rosenpass cryptography research group and contributors
URL             : https://github.com/rosenpass/rosenpass
License         : Apache Software License (ASL) 2.0 and MIT
Programming Lang: Rust
Description     : post-quantum-secure VPN that uses WireGuard to transport the actual data

Rosenpass is a key-exchange protocol using techniques that are secure
against attacks from quantum computers. It achieves the same security
guarantees as WireGuard, using two strong post-quantum key exchange
methods – Classic McEliece and Kyber.

Rosenpass keeps WireGuard security intact and adds on to it; Rosenpass
handles post-quantum security, WireGuard handles pre-quantum security.
#1118522#10
Date:
2025-10-22 02:36:24 UTC
From:
To:
Rosenpass depends on quite a few crates [0], I would suggest packaging
individual crates Rosenpass depends on according to the rust team book [1] and
then package the Rosenpass workspaces as a whole [2].

Good luck!

[0] debstatus output on the rosenpass repository, at the time of writing,
might not be fully correct or complete:
https://salsa.debian.org/uploads/-/system/user/17093/
dd261dde0d9aa122c80fb736b4423681/rosenpass.debstatus
[1]: https://rust-team.pages.debian.net/book/process-single.html
[2]: https://rust-team.pages.debian.net/book/process-workspace.html