tech · quantum risk

Is RADIUS / EAP Quantum Proof? Network Security & PQC

Risk: medium · Confidence: high · Reviewed: 2026-07-19

Verdict

RADIUS/EAP enterprise access is not quantum-proof while EAP-TLS and RADIUS protection use classical certificates and TLS. WPA3 helps classical Wi‑Fi hygiene; it is not a full PQC answer.

Overview

Enterprise Wi‑Fi and 802.1X often terminate trust at RADIUS and EAP methods such as EAP-TLS. Quantum risk follows those certificates and any TLS protecting RADIUS.

Deepen context with /is-quantum-proof/wifi and PKI lifecycle pages.

Cryptographic profile

Signatures: EAP-TLS certificates, RADIUS server TLS or shared secrets, Wi‑Fi controller certs
Hash: TLS and EAP method hashing
Public-key exposure: Campus and OT wireless identities often use long-lived enterprise certificates.

What breaks

Classical EAP-TLS client/server certificates
RADIUS over classical TLS or weak shared secrets
Untracked certs on controllers and APs

Mitigations

Inventory EAP methods and cert algorithms
Shorten wireless cert lifetimes
Upgrade management planes toward hybrid TLS
Segment OT wireless aggressively

FAQ

Does WPA3 make RADIUS quantum-safe?

WPA3 improves classical wireless security; EAP/PKI algorithms still need a PQC plan.

PSK vs EAP-TLS?

Different models; EAP-TLS inherits enterprise PKI migration work.

Key concepts (technical dictionary)

Terms used on this page — open a definition:

Full technical dictionary →