Governments and enterprises racing to prepare for the eventual arrival of quantum computers capable of breaking today's encryption now have a new benchmark to watch. ZeroTier, a software-defined networking company, has announced Release Candidate 3 (RC3) of ZeroTier Quantum, which it describes as the only software-defined networking platform offering end-to-end quantum-secure connectivity. The release is positioned as the final engineering step before full production deployment.
Why Quantum-Resistant Networking Matters Now
The urgency behind this announcement is not theoretical. Cryptographers have long warned that a sufficiently powerful quantum computer could eventually break the public-key algorithms - such as RSA and elliptic-curve cryptography - that currently secure most internet traffic, VPN tunnels, and digital signatures. The concern is not limited to future risk: adversaries can harvest encrypted data today and decrypt it later once quantum capability matures, a tactic often called "harvest now, decrypt later." That makes long-lived sensitive data, the kind held by defense agencies, financial institutions, and critical infrastructure operators, especially vulnerable in the present tense, not just the future.
This dynamic is why regulators are moving ahead of the technology itself. The White House's Executive Order 14412, issued in June, accelerates the federal government's shift toward post-quantum cryptography and requires agencies to begin assigning migration leadership and drafting plans for protecting high-value systems. Similar policy momentum is building across Europe and other regions, where regulators and critical industries are setting their own quantum-safe migration timelines.
What RC3 Actually Changes
RC3 is built around a hybrid cryptographic approach rather than a single algorithm bet. The platform combines ML-KEM-1024, a lattice-based key encapsulation mechanism selected by NIST as a post-quantum standard, with optional classical P-384 elliptic-curve cryptography in a configurable key exchange. Digital signatures rely on ML-DSA-87, another NIST-selected post-quantum algorithm, while AES-256-GCM handles encryption of data in transit. Organizations can toggle classical algorithms on or off depending on internal policy or shifting regulatory requirements, a design choice aimed at meeting or exceeding the U.S. National Security Agency's CNSA 2.0 cryptographic suite.
Beyond cryptography, RC3 expands what the company calls deployment flexibility. ZeroTier Quantum can run as a managed service, within sovereign and customer-controlled infrastructure, or in fully air-gapped environments that never touch the public internet - a requirement common in defense and classified settings. Client support now spans Windows, macOS, Linux, and Android, while new credential-based enrollment gives administrators granular control over which devices can join a network. A dedicated, authenticated delivery portal manages software entitlements, and the platform now generates administrative and security audit events, laying groundwork for broader observability.
Flexibility as a Security Requirement
For organizations with legacy infrastructure built over years or decades, a rip-and-replace approach to quantum migration is often untenable. ZeroTier's leadership frames deployment flexibility itself as a security feature: an organization's ability to control where its network runs - isolated, sovereign, or managed - can matter as much as the cryptography protecting it. This reflects a broader shift in how security-sensitive sectors think about post-quantum readiness, treating it not as a single software update but as an architectural transition that must accommodate existing operational constraints.
The company says RC3 is already running with live customers that have strict cryptographic, isolation, or control requirements, and that the platform has undergone protocol and code audit work alongside ongoing NIST-aligned cryptographic review. As quantum-safe mandates spread from federal agencies into finance, critical infrastructure, and allied governments abroad, platforms designed for adaptable deployment rather than one-size-fits-all rollout are likely to shape how the migration unfolds over the coming years.