Quantum-safe by default

The First Post-Quantum European DNS

Every DNS query you send today can be recorded by an adversary and stored — not to be read now, but later, once a large enough quantum computer exists to break today's encryption. This is called "harvest now, decrypt later": your traffic is silent evidence sitting in someone's archive, waiting for the day the lock breaks. AEU DNS closes that window now. Every encrypted DNS session — DoH, DoT, DoQ and DoH3 — is protected by a hybrid post-quantum key exchange, so the data harvested today stays unreadable even after quantum computers arrive.

The quantum threat, explained simply

Classical encryption (like the X25519 elliptic-curve key exchange used across the internet) relies on math problems that are extremely hard for today's computers to solve — but not necessarily hard for a future, sufficiently powerful quantum computer. Algorithms such as Shor's algorithm could, in principle, break that math once the hardware catches up.

The danger isn't that your DNS traffic is at risk tomorrow — it's that anyone recording encrypted traffic today can simply keep it in storage and decrypt it later, whenever that future computer becomes available. Governments, ISPs and well-resourced attackers can afford to wait. That is "harvest now, decrypt later", and it means the only real defence is encrypting with post-quantum-safe algorithms before the harvesting even starts.

How AEU DNS protects you

AEU DNS builds the key exchange behind every encrypted DNS session on X25519MLKEM768 — a hybrid construction that combines two independent algorithms into one combined key:

1

X25519

The classical elliptic-curve Diffie-Hellman exchange already trusted across the modern web — fast, battle-tested, and secure against today's computers.

2

ML-KEM-768 (Kyber)

A lattice-based post-quantum key encapsulation mechanism, standardised by NIST, designed to resist attacks from both classical and quantum computers.

The two derived keys are combined so that an attacker must break both algorithms to read anything — not just one. If a future flaw is ever found in the post-quantum math, X25519 still holds the line; if a quantum computer ever breaks X25519, ML-KEM-768 still holds the line. This hybrid design is applied automatically, on every session, across all four encrypted transports: DoH, DoT, DoQ and DoH3.

Why hybrid, not post-quantum alone

Some resolvers could, in theory, switch straight to a pure post-quantum algorithm and drop the classical one. AEU DNS deliberately keeps both. Post-quantum cryptography is still young — ML-KEM was only finalised by NIST in 2024, and unexpected weaknesses in new algorithms have happened before in cryptographic history. By combining a proven classical algorithm with a new post-quantum one, AEU DNS gets the best available guarantee today: your session is only as breakable as the stronger of the two problems, not the weaker one. That is what "hybrid" means in practice — resilience even if one half of the defence is ever compromised.

Get quantum-safe DNS in about two minutes

Create a free account, get your DNS profile and a personal certificate, and every encrypted lookup you make is protected by hybrid post-quantum key exchange — no configuration needed.

Create your account

Keep exploring

New to encrypted DNS? Start from the AEU DNS home page, or read how encrypted DNS works for a plain-language walk-through of how encryption protects you. Curious about our low-latency post-quantum transport? See DNS-over-QUIC (DoQ). Care about compliance? Check our GDPR-compliant DNS explainer.

Frequently asked questions

What is post-quantum encryption?

Post-quantum encryption uses algorithms designed to stay secure even against attacks run on a future, sufficiently powerful quantum computer — unlike classical algorithms that quantum computers could eventually break using techniques such as Shor's algorithm.

What is X25519MLKEM768?

X25519MLKEM768 is a hybrid key exchange that combines X25519 (a classical elliptic-curve algorithm) with ML-KEM-768 (a NIST-standardised post-quantum algorithm, also known as Kyber) into a single combined key. An attacker has to break both algorithms to read your traffic, not just one.

Why does DNS need it?

DNS is one of the most frequent, revealing traffic patterns your device produces — it exposes which sites and services you use. Under "harvest now, decrypt later", encrypted DNS traffic recorded today could be decrypted years from now if it only relies on classical encryption. Post-quantum key exchange closes that window today, before any harvesting has value.

Do I need to configure anything?

No. Hybrid post-quantum key exchange is applied automatically on every encrypted session across DoH, DoT, DoQ and DoH3, for every AEU DNS user, with no settings to enable.

Is AEU DNS really the first European DNS with post-quantum encryption?

Yes — AEU DNS is the first European DNS resolver to protect its encrypted transports with a hybrid post-quantum key exchange, applied by default across DoH, DoT, DoQ and DoH3.