Enabling PQC on Client

Edit online

Quantum-protected clients keep data secure with quantum-resistant encryption, ensuring safe end-to-end communication.

A quantum-protected client ensures that data payloads transmitted from these clients remain encrypted using quantum-resistant algorithms, preventing attackers from intercepting or manipulating it even on compromised networks. This creates a secure communication channel that complements server-side protection, ensuring end-to-end security.

Securing Data in Transit
To ensure quantum-safe communication between client and server, follow these steps:
  1. Set the PQC environment variable: Configure LDAP_OPT_PQC_MODE to either PQC_HYBRID or PQC_ONLY
    • On AIX and Linux: export LDAP_OPT_PQC_MODE=PQC_ONLY
    • On Windows: set LDAP_OPT_PQC_MODE=PQC_ONLY
      Table 1. Supported Values for LDAP_OPT_PQC_MODE
      Value Description
      PQC_DISABLED Disables quantum-resistant cryptography, using only traditional algorithms. This is the default value.
      PQC_HYBRID Enables hybrid mode where both traditional and quantum-resistant algorithms are available. The client can communicate over all configured protocols including TLSv1.3.
      PQC_ONLY Enforces exclusive use of quantum-resistant cryptographic algorithms. All security protocols except TLSv1.3 are disabled. Connection attempts are made only on TLSv1.3 using either quantum-resistant or traditional algorithms.

  2. Run client utilities from the same console after configuring the PQC option