Understanding the “Post-Quantum Key Exchange” SSH Warning in OCI

If you are using SSH to connect to your Oracle Cloud Infrastructure (OCI) instance, you might have recently encountered a warning like this:

---

🔍 Real SSH Output

(base) karandodwal@Karans-MacBook-Air ~ % ssh opc@80.225.212.15
** WARNING: connection is not using a post-quantum key exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
Last login: Sat May 16 17:39:53 2026 from 49.47.70.44
[opc@instance-vm1 ~]$

---

🤔 What Does This Warning Mean?

This warning is generated by your SSH client (most likely a newer version of OpenSSH on macOS). It indicates that your connection is:

• Using traditional cryptographic algorithms
• Not using post-quantum cryptography (PQC)

Post-quantum cryptography refers to encryption methods designed to remain secure even against future quantum computers.

---

🧠 What is “Store Now, Decrypt Later”?

The warning specifically mentions:

"store now, decrypt later"

This is a theoretical attack scenario where:

• An attacker captures encrypted SSH traffic today
• Stores it for future use
• Decrypts it later when quantum computers become powerful enough

👉 Important: This is not a current threat, but a future possibility.

---

⚠️ Should You Be Concerned?

Short answer: No, not for now.

• Your SSH session is still secure using modern encryption
• No practical quantum attacks exist today
• This warning is proactive and informational

For typical use cases like:

• OCI Free Tier instances
• Development environments
• Learning setups

👉 You can safely ignore this warning.

---

💡 Why Are You Seeing This Now?

Newer versions of OpenSSH have started:

• Highlighting connections that are not quantum-resistant
• Encouraging adoption of future-proof cryptography

However:

• Most servers (including many OCI images) do not yet support PQC
• So the warning appears even though everything is functioning normally

---

🔧 How to Handle This Warning

Option 1: Ignore It (Recommended)

For most users, especially in non-production environments, no action is required.

Option 2: Update SSH Server

sudo dnf update openssh-server

Then check supported key exchange algorithms:

ssh -Q kex

Look for PQC-related algorithms like:

sntrup761x25519-sha512@openssh.com

Option 3: Suppress the Warning (Client Side)

Edit your SSH config file:

~/.ssh/config

Add:

Host *
    LogLevel ERROR

⚠️ This only hides the warning—it does not improve security.

---

🧾 Key Takeaways

• This warning comes from modern OpenSSH clients
• Your connection is still secure by current standards
• The risk mentioned is future-focused (quantum computing)
• OCI instances typically do not yet support PQC
• You can safely ignore or suppress the warning

---

🔗 Learn More

• OpenSSH Post-Quantum Cryptography Details

---

🏁 Conclusion

The post-quantum SSH warning may look alarming at first, but it is simply a forward-looking security notice rather than an immediate threat.

As quantum computing evolves, we can expect cloud providers and SSH implementations to gradually adopt quantum-resistant algorithms. Until then, your current setup remains secure and fully functional.