Captured traffic is now safe from future quantum computers. They are using classic McEliece ( https://en.wikipedia.org/wiki/McEliece_cryptosystem ) which is many decades old. One of the finalists for the PQC NIST competition - and may still be standardized, key sizes are too large they said.

https://github.com/mullvad/mullvadvpn-app/blob/master/talpid...

https://github.com/mullvad/mullvadvpn-app/blob/master/talpid...