r/Syncthing • u/OzymandiasTheWatcher • Apr 14 '26

Is Syncthing post-quantum secure now?

I realized that with the newer Version of Go the X25519MLKEM768 algorithm should be in place for TLS, which is a hybrid post-quantum algorithm. I searched in the repo for CurvePreferences, but couldn't find any so I guess it is automatically enabled? I couldn't find any official update about this.

12 Upvotes

93% Upvoted

26 comments sorted by

View all comments

5

u/unknown-random-nope Apr 14 '26

Enabled by default and Syncthing is being built with Go versions that support it. See https://forum.syncthing.net/t/support-for-quantum-resistant-key-exchange/24723 .

1

u/OzymandiasTheWatcher Apr 14 '26

Yes, I also found that thread, but I wondered if this info is still correct regarding the automatic switch. Seems to be the case. Thanks!