ExpressVPN has made a significant leap in the VPN landscape by announcing a transformative revamp of its Lightway protocol. By recoding it from C to Rust, ExpressVPN aims to elevate both security and performance, promising users a “more secure and high-performing” experience.
Table of Contents
A new VPN protocol standard
Since the launch of Lightway in 2020, ExpressVPN set out to provide speedy, secure, and reliable connections. The recent upgrade to Rust is intended to solidify that commitment while laying the groundwork for the future of VPN connectivity. Pete Membrey, Chief Research Officer at ExpressVPN, emphasized Rust’s reputation as a high-performing, secure language making it a logical choice for this evolution.
Adopting Rust brings three critical advantages:
- Security: Rust’s built-in memory safety mechanisms significantly diminish the common vulnerabilities that plague traditional C code.
- Performance: The language’s simpler syntax helps create a lighter and faster VPN connection, benefiting users with quicker response times.
- Ease of extension: Rust’s modern architecture facilitates seamless implementation of security fixes and new features, which is crucial as the industry pivots towards post-quantum standards.
The revamped Lightway is currently supported by the provider’s built-in VPN router, ExpressVPN Aircove. An expansion is expected in the coming months, with an update for the Android VPN application anticipated before the end of March.
Independent audits conducted by cybersecurity firms Cure53 and Praetorian have already scrutinized the upgraded Lightway and confirmed its integrity. Praetorian identified only two low-risk findings, while Cure53 reported five issues, four of which fell under the “miscellaneous” category and posed low exploitation potential. ExpressVPN promptly addressed these findings, underscoring its dedication to maintaining high security standards.
Aaron Engel, Chief Information Security Officer at ExpressVPN, stated, “Investing in dual audits from two independent firms was an important decision we made to gain diverse expert perspectives on Lightway’s new code base.” In line with its transparency commitments, ExpressVPN encourages users to explore Lightway’s source code available on their GitHub page.
Challenging the industry
With Lightway 2.0, ExpressVPN aims to establish a new benchmark for future VPN protocols, focusing on the ideal amalgamation of security, performance, and efficiency. However, the provider is not only focused on enhancing its offerings but also aims to inspire the entire industry to follow suit.
Lauren Hendry Parsons, Director for Communication and Advocacy at ExpressVPN, highlighted the broader mission: “Promoting digital rights is ultimately our main goal.” The potential applications of Lightway in decentralized VPN solutions further extend its utility beyond traditional frameworks.
“We do hope that people [in the VPN industry] will see Lightway as a resourceful tool,” added Pete Membrey. He pointed out the capabilities of a post-quantum secure VPN that operates swiftly, which could even have implications for military applications. “Our goal with Lightway is not only to serve the users of ExpressVPN but also to contribute its technology meaningfully to the VPN industry.”
This open-source approach allows developers and organizations worldwide to examine and possibly integrate Lightway into their own systems, signifying a step towards community-driven innovation in the realm of digital privacy. As ExpressVPN sets out to challenge current standards, it invites collaboration across the industry to foster stronger, more efficient, and secure VPN technologies.
Leave a comment