A second road to quantum safety: a Postquantum Preshared Key mixes an out-of-band secret into the IKE key schedule that never travels the wire, so even a classical handshake resists "harvest now, decrypt later," on gear not supporting ML-KEM.
We build a real hybrid IKEv2 tunnel in two Docker containers, capture the packets, and run classical versus hybrid side by side, seeing the extra round trip, ML-KEM fragmentation, and that going quantum-safe costs almost nothing.
Quantum computers will break today's crypto. We introduce the two pillars of a secure handshake, key exchange and auth, and how each faces a different quantum threat: "harvest now, decrypt later" versus the slower risk to long-lived trust anchors.
Cisco Networking App Marketplace partners enable scalable, AI-ready devices by enhancing automation, security, and performance, empowering customers to modernize networks and unlock new business value across campus and branch environments.
