ExpressVPN Reinvents Its Lightway Protocol Using Rust
Here’s what you need to know: ExpressVPN's Lightway protocol has been revamped using the Rust programming language, enhancing its performance with full post-quantum encryption.
ExpressVPN Boosts Security with Rust
Dedicated to privacy and security, ExpressVPN has taken a significant step by rewriting its proprietary protocol, Lightway, using the modern programming language Rust, aiming to enhance the service’s performance and security.
Lightway Enters the Post-Quantum Era
Introduced in 2020, Lightway is a VPN protocol developed by ExpressVPN to provide a faster, more secure, and reliable user experience. It has recently been upgraded to include post-quantum ML-KEM encryption, setting a new industry standard. ExpressVPN is the first major VPN to implement full post-quantum encryption.
Revising Lightway with Rust offers three primary benefits. Firstly, Rust inherently enhances security with its built-in memory safety, eliminating common vulnerabilities and attack vectors found in C. Secondly, Rust enables simpler, more expressive code, which leads to superior performance and efficiency compared to C. Lastly, Rust’s architecture supports intuitive development, making it easier to expand Lightway’s features without compromising its core properties.
An Audited and Approved Protocol
The reliability of Lightway’s new Rust-based code has been confirmed through two independent audits. Cybersecurity firms Cure53 and Praetorian conducted comprehensive reviews of Lightway’s Rust code and cryptographic foundations. The results were positive, with a very limited number of issues, all of which were promptly addressed and revalidated by ExpressVPN.
Deployment Scheduled by September 2025
The updated Lightway in Rust will be gradually deployed across various platforms. The first device to receive the update will be ExpressVPN’s Aircove router, with other devices expected to follow by September 2025. Users will need to install the latest update when Lightway in Rust becomes available for their device.
In conclusion, “At ExpressVPN, we innovate to tackle tomorrow’s challenges. Upgrading Lightway from C to Rust was a strategic and straightforward choice to boost performance and security, ensuring longevity,” stated Pete Membrey, Director of Research at ExpressVPN.