The Rosenpass tool is a daemon, written in Rust, that implements the Rosenpass protocol to create and exchange hybridised post-quantum and classically secure keys between two peers. It uses two cryptographic methods, Classic McEliece and Kyber, to secure systems against quantum attacks. It represents one of the most advanced open-source solutions for providing post-quantum security currently available.

While the Rosenpass tool is written in Rust, it currently relies on libsodium and liboqs, both of which are C libraries, enabling advanced security features. We implement a number of techniques to ensure that the code is secure. For example, we use variable colouring (gating use of a secret value through a .secret() method), and the code zeroises all key material.

The Rosenpass tool works best and most natively with WireGuard. It can, however, be used to perform a stand-alone key exchange. Using this mode, it can secure other protocols against attacks from quantum computers. To use this mode, the rosenpass binary must be used together with the outfile parameter. Rosenpass will write a key to the given file every two minutes, and print a message on standard out to notify the user or the calling script that the key has changed.

This section contains links to user guides, installation guides, release notes, and other information on the Rosenpass Tool.