ZeroTier has released Candidate 3 (RC3) of ZeroTier Quantum, a software-defined networking platform the company describes as the only one of its kind offering end-to-end quantum-secure connectivity. The milestone brings the platform to the threshold of full production deployment and signals that organizations with the most demanding security requirements, including defense agencies, financial institutions, and critical infrastructure operators, can now test quantum-resistant networking without overhauling their existing systems.
Why Quantum-Resistant Networking Matters Now
The urgency behind this kind of platform stems from a well-understood threat in cryptography circles: sufficiently powerful quantum computers could eventually break the public-key encryption schemes that currently protect most internet traffic. Data intercepted and stored today could be decrypted retroactively once that capability arrives, a risk often called "harvest now, decrypt later." For organizations handling classified material, financial records, or infrastructure controls, that risk horizon is already shaping procurement and compliance decisions. ZeroTier Quantum answers this by building post-quantum algorithms directly into its networking layer rather than treating encryption as an add-on.
Specifically, the platform combines ML-KEM-1024, a lattice-based key encapsulation mechanism selected by the U.S. National Institute of Standards and Technology, with an optional layer of classical P-384 elliptic-curve cryptography in a hybrid exchange. Digital signatures rely on ML-DSA-87, while AES-256-GCM handles bulk data encryption in transit. Because classical algorithms can be toggled independently, organizations can adjust their cryptographic posture as regulations evolve, rather than waiting for a full platform redesign.
Flexibility as a Security Requirement
A recurring theme in this release is deployment flexibility, not simply as a convenience but as a security necessity. Government and defense networks frequently cannot route traffic through third-party infrastructure, and some systems remain permanently disconnected from the public internet by design. RC3 accommodates this by supporting managed service deployment alongside sovereign, self-hosted, and fully air-gapped configurations.
- Client support now spans Windows, macOS, Linux, and Android, broadening practical usability across mixed-device environments.
- Credential-based enrollment gives administrators direct control over which devices can join a given network.
- A dedicated delivery portal manages entitlements and software access for each customer's specific deployment.
- New audit event generation lays groundwork for more detailed observability and compliance reporting.
Regulatory Pressure Is Accelerating Adoption
This release arrives as governments formalize timelines for the shift to post-quantum cryptography. In the United States, Executive Order 14412, issued in June, pushes federal agencies to designate migration leadership and begin planning the transition of high-value systems to quantum-safe standards. Comparable efforts are underway in Europe and elsewhere, as regulators recognize that cryptographic transitions take years to execute properly and cannot be deferred until quantum computers are operational. ZeroTier's stated aim with CNSA 2.0 alignment, the U.S. National Security Agency's current cryptographic guidance, reflects an attempt to meet these emerging compliance baselines directly rather than retrofit them later.
For organizations weighing when to act, the practical argument is straightforward: networking infrastructure is expensive and slow to replace, while cryptographic standards can shift with comparatively little warning. A platform that allows incremental adoption, hybrid cryptography, and deployment in isolated environments offers a route to compliance that does not require abandoning years of existing architecture. Whether ZeroTier Quantum fulfills that promise at scale will depend on how it performs once broader production use begins, but RC3 marks a concrete step toward answering that question.
