Quantum Cryptography, Cybersecurity

Niagara Networks launches 90 Gbps TLS decryption with post-quantum crypto

Avatar of Ivy Delaney
November 9, 2026 by Ivy Delaney

Niagara Networks now achieves 90 Gbps of TLS decryption throughput with its ePacketron platform, a leap in processing speed for encrypted traffic inspection, the company says. The enhanced system supports up to 110,000 new decrypted TLS sessions each second and scales to one million concurrent sessions, according to the company’s performance testing. Epacketron uniquely maintains Encrypted Client Hello negotiation for compatible clients while still enabling policy-driven inspection, rather than blocking or downgrading connections. The platform also incorporates support for post-quantum cryptography, using X25519MLKEM768 as its preferred key exchange configuration.

ECH-Aware TLS 1.3 Decryption with Post-Quantum Cryptography

Niagara Networks’ ePacketron platform now achieves over 90 Gbps of TLS decryption throughput, a performance level enabled by a redesigned decryption engine and optimized hardware acceleration. The company’s performance testing demonstrated the platform’s capacity to handle this throughput while simultaneously supporting up to one million concurrent decrypted sessions, a figure that addresses the demands of large-scale networks, according to Niagara Networks. The ePacketron platform distinguishes itself through its ECH-aware decryption capabilities, which selectively intercept eligible connections protected by Encrypted Client Hello without blocking or downgrading them.

This approach preserves the privacy benefits of ECH for enterprise-managed clients while still allowing authorized inspection based on configured policies. “Encryption is evolving faster than traditional network visibility architectures,” said Ben Askarinam, Founder & CEO of Niagara Networks.

“With ECH-aware TLS inspection, key-exchange support and high-performance decryption, we are extending ePacketron beyond conventional packet brokering into a new generation of Network Intelligence.” The system’s design allows organizations to balance security requirements with privacy considerations, a growing concern as data protection regulations become more stringent, the company says. ML-KEM-1024 is also supported for compatibility with peers negotiating that specific key exchange.

Vitaliy Ivanov, Vice President of Software Engineering at Niagara Networks, explained that “Supporting modern TLS 1.3 inspection requires more than raw decryption throughput. It requires compatibility with emerging encryption standards, scalable session processing and intelligent traffic handling.” The company built ePacketron to combine ECH interception, key exchange and selective policy enforcement, ensuring security teams can maintain actionable visibility as TLS evolves. The ePacketron architecture uses a dedicated Network Intelligence layer, providing up to 600 Gbps of Layer 4-7 packet processing.

This offloading of compute-intensive tasks from downstream security tools improves overall inspection efficiency and extends the value of existing security infrastructure. By prioritizing traffic requiring deeper analysis and bypassing encrypted communications that do not, the platform optimizes resource allocation and reduces the burden on security teams.

This selective model for encrypted traffic visibility balances security, privacy and operational performance, allowing organizations to focus their resources on the most critical threats, Niagara Networks reports. “Our objective is to give organizations greater control over encrypted traffic visibility while helping their existing security infrastructure operate more efficiently,” Askarinam added. The platform’s policy-based selective inspection allows for configurable TLS handling, including decryption, logging, blocking, or encrypted bypass, based on destination intelligence and security requirements.

Supporting modern TLS 1.3 inspection requires more than raw decryption throughput. It requires compatibility with emerging encryption standards, scalable session processing & intelligent traffic handling.

Vitaliy Ivanov, Vice President of Software Engineering at Niagara Networks
More like this
Quantum CryptographyResearchers Bound Violations of Information Causality Principles
Quantum SecuritySovereign Tech Fund invests in Let’s Encrypt’s quantum-resistant infrastructure
Quantum CryptographyEuropean project aims to harden quantum-safe cryptography against attack
Quantum SecuritySEALSQ, TechAgency partner to guide firms through quantum shift
Stay current

See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.

Tags:
post-quantum cryptography
Avatar of Ivy Delaney

Ivy Delaney

Ivy Delaney has been working with neural networks and machine learning since the mid-nineties, back when a couple of hidden layers and a long afternoon of training counted as ambitious. She has watched the field go from academic curiosity to the thing quietly running underneath everything, and she brings that long view to quantum computing. For Quantum Zeitgeist she covers the ground where the two fields meet. That means quantum machine learning and the variational algorithms it leans on, and it also means the less glamorous but more interesting story of classical machine learning already doing real work inside quantum machines, decoding error-correcting codes, calibrating noisy hardware and learning the error models that simulators depend on. She writes about the hardware those algorithms have to run on too, and about the post-quantum cryptography scramble that the same hardware has set off. Her stories typically start with the paper, whether that is peer-reviewed work, conference proceedings or an arXiv preprint, with the source linked so you can hold a claim up against the research it came from. She is unimpressed by benchmarks that will not say what they beat, and by demonstrations that only work in the press release.

Latest Posts by Ivy Delaney: