Quantum-Secure IPsec Gateway

Preserve the integrity of your AI data today and in the post-quantum era, across private, public, and hosted AI environments.

The Qrypt Advantage

  • Enables cryptographic agility

  • Combines PQC algorithms with Qrypt’s BLAST protocol—which eliminates key transmission—to ensure resiliency even if future PQC standards are compromised

  • Leverage Qrypt's QRNGs—the only U.S. QRNG capability—built in an exclusive partnership with Los Alamos and Oak Ridge National Laboratories and ESV certified

  • Runs directly on BF-3 DPUs for high-performance, low-latency encryption at the IP layer

  • Leveraging existing networking and infrastructure, no rip and replace or architectural change required

  • Securely transfer AI data between or within AI data centers at scale

  • Implicitly zero trust by decoupling key generation from data transmission, ensuring keys are never in motion or intercepted

  • Built to withstand today’s HNDL attacks, tomorrow’s quantum threats, and potential PQC failures

  • Ensure data remains private, with supporting controls to maintain data ownership and integrity

Use Cases

Ability to utilize public and hosted AI infrastructures with the assurance that your data remains private
Cryptographic redundancy: eliminates trust in a single cryptographic protocol
Sensitive data does not exist in an unencrypted state outside the training clusters
Eliminates single points of failure even if one of the keys is compromised
Protects against the Harvest Now, Decrypt Later vulnerability
Quantum-secure IPsec communication between enterprise and edge or DMZ

How It Works

Qrypt’s IPsec strongSwan plugin integrates into Nvidia BlueField-3 (BF-3) DPUs to enable both classical and quantum-secure key exchange using Qrypt's BLAST protocol

The solution leverages Nvidia BF-3 DPUs hardware capability to quantum-secure network communication with optimized performance

Easily setup Qrypt's IPsec strongSwan plugin by configuring the existing BF-3 strongSwan IPsec service, enabling quantum-secure IPsec VPN connections