ALight Technology And Services Limited

Monday, October 19, 2026

ALightVPN Announces a Post-Quantum Security Upgrade: ML-KEM-1024, NIST Category 5

ALightVPN now uses SecP384r1MLKEM1024, advancing my hybrid post-quantum VPN key agreement to combine the P-384 elliptic curve with ML-KEM-1024. 15 testers can get 2 years of VPN for free for helping submit SecSMS, ALightVPN profile downloader in Android store. Contact admin@alightservices.com.

I thank Microsoft for Startup Founders, Corporate Vision Magazine, Government of U.K, Perplexity, NASSCOM 10000, my parents, my elder sister.

For customers, the central change is adoption of ML-KEM-1024—the NIST Security Category 5 parameter set standardized in FIPS 203. This is the highest security category among the three ML-KEM parameter sets in that standard.

Focus remains straightforward: building a VPN service around security and making the technology behind that protection understandable.

What has changed?

ALightVPN previously used SecP256r1MLKEM768. Now moved to SecP384r1MLKEM1024.

Component	Previous configuration	New configuration
Hybrid key agreement	SecP256r1MLKEM768	SecP384r1MLKEM1024
Traditional component	P-256 ECDHE	P-384 ECDHE
Post-quantum component	ML-KEM-768	ML-KEM-1024
NIST category of the ML-KEM component	Category 3	Category 5

The upgrade changes both components of the hybrid key agreement. It brings a higher-category post-quantum parameter set into the process used to establish connection secrets.

Understanding FIPS 203 and “Level 5”

FIPS 203 is NIST’s standard for ML-KEM, a mechanism for establishing a shared secret over a public network. It specifies ML-KEM-512, ML-KEM-768 and ML-KEM-1024, associated with Security Categories 1, 3 and 5 respectively.

You may see Category 5 described informally as “Level 5.” The precise description of this announcement is:

ALightVPN now uses hybrid key agreement incorporating FIPS 203 ML-KEM-1024, a NIST Security Category 5 algorithm.

Here, “203” identifies the standard and “5” identifies the security category of the ML-KEM parameter set. The designation applies to that cryptographic component; it does not assign one security rating to every part of a VPN.

Why prepare for quantum threats now?

Some information needs to remain private long after it is transmitted. NIST describes a threat known as “harvest now, decrypt later”: an adversary collects encrypted data today and retains it in the hope that future quantum capabilities will make decryption possible.

Post-quantum key establishment is designed to address that future threat to connection secrecy. For ALightVPN, adopting ML-KEM-1024 reflects our decision to invest in that protection now, alongside the security needs customers already have today.

Why use a hybrid approach?

SecP384r1MLKEM1024 brings together two different cryptographic foundations:

P-384 ECDHE: the traditional elliptic-curve component.
ML-KEM-1024: the post-quantum component.

Their shared secrets are combined within the TLS key schedule. The purpose of this hybrid design is to preserve protection if one component is broken while the other remains secure, subject to correct implementation and the protocol’s security assumptions.

This gives ALightVPN a way to adopt post-quantum key establishment while retaining traditional cryptography alongside it. We see that combination as a practical approach to evolving our security architecture.

Key establishment and traffic encryption have different jobs

The new algorithm’s name describes how connection secrets are established. It does not mean every packet is encrypted directly with ML-KEM-1024.

ALightVPN continues to use AES-256 or ChaCha20-Poly1305 for VPN traffic encryption. The hybrid key agreement protects a different part of the connection: the establishment of secret material used by the secure channel.

For customers comparing VPN services, that distinction matters. A meaningful security description should explain both the handshake and the protection applied to traffic, rather than relying on a single impressive number.

What this announcement means for customers

For people choosing ALightVPN because security matters to them, this upgrade is another concrete step in the direction we have chosen for the service.

It is particularly relevant when evaluating post-quantum VPN technology: customers can identify the exact hybrid group and the exact ML-KEM parameter set being used.

Compatibility also matters. A connection must actually negotiate SecP384r1MLKEM1024 to receive the protection described here. Customers should use an ALightVPN configuration and client version that support the upgraded group.

Clear claims are part of security

Using a standardized algorithm does not, by itself, establish FIPS 140-3 validation of a product. This announcement describes ALightVPN’s cryptographic upgrade, rather than claiming certification of the whole service.

Likewise, post-quantum key agreement and post-quantum certificate authentication are separate capabilities. Changing the key agreement does not automatically change the certificate signatures used to authenticate a connection.

I believe customers deserve this level of clarity when choosing a security service.

ALightVPN now combines P-384 with ML-KEM-1024, bringing NIST Category 5 post-quantum key establishment into our hybrid VPN configuration.

If you don’t need a VPN at home, not a frequent traveller – use ALightVPN TravelPass starts at $1.49, $0.49 per day for upto 10 days, $4.99 for 30 days and no subscription or cancellation or any unexpected renewal. If you need VPN at home or plan to travel for more than 50 days in 2 years, get the subscription (renews at same price) for a discount - $23.76 for 2 years. ALightVPN

Explore ALightVPN and get started at vpn.alightservices.com.

Follow on social media to stay updated on the latest developments:

ALight Technologies USA Inc | Facebook

https://www.facebook.com/ALightTechnologyAndServicesLimited

Web Veta | Facebook

WebVeta Saas | LinkedIn

https://www.linkedin.com/company/alight-technologies-usa-inc/

https://www.linkedin.com/company/alight-technology-and-services-limited/

https://twitter.com/ALightTech

https://www.youtube.com/@alighttechnologyandservicesltd

https://blog.alightservices.com/

https://medium.com/@ALlightTechnologyAndServices

Best regards,

Mr. Kanti Arumilli

I don’t have any fake aliases, nor any virtual aliases like some of the the psycho spy R&AW traitors of India. NOT associated with the “ass”, “es”, “eka”, “ok”, “okay”, “is”, erra / yerra karan, kamalakar, diwakar, kareem, karan, erra / yerra sowmya, erra / yerra, zinnabathuni, bojja srinivas (was a friend and batchmate 1998 – 2002, not anymore – if he joined Mafia), mukesh golla (was a friend and classmate 1998 – 2002, if he joined Mafia), erra, erra, thota veera, uttam’s, bandhavi’s, bhattaru’s, thota’s, bojja’s, bhattaru’s or Arumilli srinivas or Arumilli uttam(may be they are part of a different Arumilli family – not my Arumilli family).

ALightVPN Travel Pass: A VPN for Your Next Trip

A flight booked. A hotel confirmed. A laptop packed.

There is one more thing worth planning before you leave: how you will connect when you arrive.

A weekend away can involve airport Wi-Fi, a hotel network, a café hotspot, and a few work calls squeezed between activities. You may want a VPN for that journey without making it another recurring expense.

I thank Microsoft for Startup Founders, Corporate Vision Magazine, Government of U.K, Perplexity, NASSCOM 10000, my parents, my elder sister.

ALightVPN Travel Pass gives occasional travellers a prepaid way to use ALightVPN. You can choose the longer 2 year plan at huge discounts, if you think you plan to travel for more than 50 days in the next 2 years and use VPN throughout 2 years. Choose a trip length, decide when access begins, and make a single payment, or choose the $23.76 for 2 years subscription.

How much does ALightVPN Travel Pass cost?

Selected trip length	One-time price in USD	Access included
1–3 days	$1.49 flat	3 days
4–10 days	$0.49 per day	Selected duration
11–30 days	$4.99 flat	Full 30 days

The longer pass covers 30 consecutive days, rather than a calendar month.

There is no subscription to cancel and get charged for forgetting. The pass expires automatically without a renewal charge.

For an occasional traveller, that makes the purchasing decision straightforward: choose the option that fits the journey and see the cost before paying.

Choose when your access begins

Travel preparation often happens well before departure. Your VPN access does not need to begin just because you are ready to organise it.

Travel Pass offers three activation choices:

Immediate: begin after payment confirmation.
Manual: activate later when you are ready.
Scheduled: choose a start date and time in UTC.

Start and expiry information is displayed in UTC. If you schedule activation, compare it with your local departure time so the pass begins when you intend.

Before leaving, allow time to complete installation and check your device setup. Getting familiar with the connection process at home is easier than troubleshooting while boarding is announced.

Where a VPN fits into travel security

Travelling changes your network environment. At home, you may recognise the router, know who manages it, and have time to check a connection problem. On the road, you often have less information.

A VPN encrypts the traffic routed through its tunnel between your device and the VPN server. That can add protection on networks outside your control.

HTTPS remains essential: it protects connections to websites that use it. A VPN is an additional layer for network traffic; it does not remove the need to check website addresses, respect certificate warnings, or secure your device.

For a traveller, the useful habit is simple: prepare your connection before you need it, then use it consistently alongside normal account and device security.

Who might find Travel Pass useful?

The short-break traveller

You are away for a few days and expect to use shared networks for bookings, messages, and everyday browsing. A limited-duration pass gives you a purchase tied to that specific break.

The conference attendee

Your schedule includes presentations, meetings, travel, and perhaps some work from the hotel. Add VPN setup to the same checklist as your event registration and laptop charger.

The occasional remote worker

You usually work from a familiar location, but this month includes time away. Before using a personal VPN for work, check your organisation's requirements and use any mandated corporate connection.

The holiday planner

You like arranging essentials ahead of time. Preparing account access, software updates, and connectivity before departure leaves fewer technical decisions for the trip itself.

A short digital checklist before departure

A VPN works best as part of a few sensible habits:

Update your operating system, browser, and applications.
Enable multifactor authentication for important accounts.
Install and test the VPN software before relying on it abroad.
Confirm network names with the venue and disable unnecessary automatic connections.
Keep using HTTPS and stop if a browser displays a certificate warning.
Check your pass timing, especially if your itinerary crosses time zones.

Also keep recovery options available for essential accounts. Losing access to an email account while travelling can be more disruptive than forgetting a charging cable.

Buy access for the journey ahead

Travel involves enough decisions already. Your VPN purchase should be easy to understand.

ALightVPN Travel Pass is built around an occasional need: arranging VPN access for the time you plan to be away.

Whether your next journey is a city break, a conference, or a longer visit, you can prepare your connection alongside the rest of your itinerary.

If you don’t need VPN at home and not a frequent traveller Choose your ALightVPN Travel Pass.

If you need VPN at home or frequent traveller buy 2 years for $23.76! ALightVPN

Follow on social media to stay updated on the latest developments:

ALight Technologies USA Inc | Facebook

https://www.facebook.com/ALightTechnologyAndServicesLimited

Web Veta | Facebook

WebVeta Saas | LinkedIn

https://www.linkedin.com/company/alight-technologies-usa-inc/

https://www.linkedin.com/company/alight-technology-and-services-limited/

https://twitter.com/ALightTech

https://www.youtube.com/@alighttechnologyandservicesltd

https://blog.alightservices.com/

https://medium.com/@ALlightTechnologyAndServices

Best regards,

Mr. Kanti Arumilli

Sunday, October 18, 2026

Introducing Travel Pass: VPN for Your Trip — Pay Once, Never Auto-Renews

Packing for a trip shouldn't mean starting a VPN subscription you don't need. Today I am launching ALightVPN Travel Pass — prepaid VPN access for travellers, from $1.49. One payment. No subscription. No renewal charges.

I thank Microsoft for Startup Founders, Corporate Vision Magazine, Government of U.K, Perplexity, NASSCOM 10000, my parents, my elder sister.

Whether it's a long weekend abroad or a month on the road, a Travel Pass covers exactly the trip.

Simple, Transparent Pricing

Your trip	One-time price	What you get
1–3 days	$1.49 flat	3 days of VPN access
4–10 days	$0.49 per day	exactly the days you chose
11–30 days	$4.99 flat	a full 30 days

Choose 11 days or more and you automatically unlock the whole 30-day pass for $4.99 — our best value, and still a single one-time payment.

A "month" here means 30 consecutive days, not a calendar month. Buy mid-month and you still get every one of the 30 days.

You Decide When the Clock Starts

Buying VPN access before you fly shouldn't waste the days you paid for. With Travel Pass, you choose when your pass begins:

Start it later — buy today, press "Start my pass" when your trip begins. The clock only runs from that moment.
Start right away — the countdown begins as soon as your payment is confirmed.
Schedule it — planning a trip next week? Pick the exact date and time (UTC), and your pass turns on automatically at that instant.

Honest by Design

No subscription is ever created. A Travel Pass is a one-time payment — there is nothing to cancel.
Works alongside your plan. Already have an ALightVPN trial? A Travel Pass adds access on top; you can use after the trial, without subscribing.
Automatic expiry. When your pass ends, access stops on its own. Another pass is always just one payment away — but no extra charges.
Clear status. Your Travel Pass page shows the exact start and expiry times in UTC, so there are no guessing games mid-trip.

For the Frequent Flyer (and the Occasional One)

Travel Pass is built for anyone who needs a VPN sometimes: the conference-goer who wants secure Wi-Fi at the venue, the holiday traveller checking banking apps from a hotel, the remote worker spending a month in a new city. If you're the other kind — always online, always protected — our subscription plans still fit you best.

How to Get Yours

Head to Billing → Travel Pass (or the Travel Pass link in the navigation) and pick your trip length — 1 to 30 days.
Choose when it should start: later, right away, or on a date you pick.
Pay once through our secure checkout. Done.

You'll see your pass on the Travel Pass page with its live status and exact expiry. Need another trip later? Buy another pass — it's simple, and non-recurring.

VPN for your trip. From $1.49. Never auto-renews.

*** Buy only on confirmed trips, or can postpone along with your postponed or cancelled trips. Refund – payment gateway fee.

Follow on social media to stay updated on the latest developments:

ALight Technologies USA Inc | Facebook

https://www.facebook.com/ALightTechnologyAndServicesLimited

Web Veta | Facebook

WebVeta Saas | LinkedIn

https://www.linkedin.com/company/alight-technologies-usa-inc/

https://www.linkedin.com/company/alight-technology-and-services-limited/

https://twitter.com/ALightTech

https://www.youtube.com/@alighttechnologyandservicesltd

https://blog.alightservices.com/

https://medium.com/@ALlightTechnologyAndServices

Best regards,

Mr. Kanti Arumilli

Tuesday, October 13, 2026

You update your Passwords but NOT TOTP!

The drones you can't see

Imagine cameras you can't see, floating where you can't look — over your shoulder at the café, above your desk at home — watching every screen you unlock. Invisible speakers whispering your own contacts' voices back at you. OTPs read the second they arrive. Sessions ridden the moment you log in.

I thank Microsoft for Startup Founders, Corporate Vision Magazine, Government of U.K, Perplexity, NASSCOM 10000, my parents, my elder sister.

You don't have to believe in invisible drones to feel the shape of this threat. Shoulder-surfing, screen-capture malware, SIM-swap crews, phishing kits that relay your login in real time — the effect is identical: **what your eyes can see, someone else's equipment can see too. And what your apps display in plain text is already stolen.

The thing nobody rotates: TOTP

Here's the uncomfortable truth this update is built around: people change passwords but not TOTP.

When an account is breached, the ritual is familiar — reset the password, feel safe, move on. But the TOTP seed — that QR code you scanned once, two years ago, possibly from a screenshot still sitting in your gallery or a cloud backup — never gets revoked. Whoever holds that seed mints valid six-digit codes forever, alongside your shiny new password. The lock was changed; the spare key was copied before you bought the lock.

TOTP seeds are the most rarely-rotated secret in personal security:

- The enrollment QR is shown once and forgotten, but secret cameras could be recording and scanning.

- Seeds live in authenticator apps, screenshots, old phones, cloud backups — rarely audited.

- Most services don't even offer re-seed my authenticator prominently, so nobody does it.

- And every code your authenticator displays on screen is readable by anything watching the screen

A displayed TOTP code is a password with a 30-second expiry — against an invisible camera, 30 seconds is an eternity.

HNDL: Harvest Now, Decrypt Later

Now zoom out from the screen to the wire. Hackers and serious criminals practice HNDL — Harvest Now, Decrypt Later: vacuum up encrypted traffic today, store it, and decrypt it years from now when quantum computers break RSA and elliptic curves. Your VPN session from 2024 could be readable in 2034. Use Post Quantum VPN - https://vpn.alightservices.com/ 7 days trial, 14 day refund for $0.99 per month if you sign up by mid January and pay for 24 months.

This is why "encrypted" is no longer a complete answer. Anything protected only by classical cryptography is living on borrowed time. The only traffic that survives HNDL is traffic wrapped in post-quantum cryptography — ML-KEM key exchange, hybrid classical+PQ handshakes — where even a future quantum adversary learns nothing. That is what a post-quantum VPN is for: not hiding you from today's watchers (any good VPN does that), but keeping today's sessions unreadable to tomorrow's machines. Session hijacking — riding your live login instead of stealing your password. if the session keys are quantum-safe and the OTPs never cross the wire in the clear, there is nothing to harvest worth keeping.

What this SecSMS update is about

https://github.com/ALightTechnologyAndServicesLimited/SecSMS

This update turns SecSMS into a vault shaped exactly like the threat above:

1. A TOTP authenticator that never shows you the code.

Codes are generated, held in memory for milliseconds, and leave only through two exits: Copy to clipboard, or Send to Windows over Bluetooth encrypted with a hybrid post-quantum channel (X25519 + ML-KEM-768, AES-256-GCM). On screen, every account shows only `••••••` with a countdown. An invisible camera sees asterisks. There is nothing to shoulder-surf.

2. Enrollment straight from the camera.

Scan the enrollment QR directly — the seed goes from lens to encrypted storage (Keystore/Keychain-backed SecureStorage) without ever being displayed, screenshotted, or pasted through a gallery. Manual entry exists as fallback. Accounts can be renamed and deleted; secrets are never logged. But the invisible drones could capture the QR code, still a problem!

3. A biometric gate in front of everything.

Face or fingerprint — Strong (Class 3), no weak face-unlock, no PIN fallback that an onlooker can memorize. The app locks when backgrounded and demands proof on return. Your TOTP seeds and SMS OTPs sit behind hardware-backed identity, not a four-digit code someone watched you type.

4. The same philosophy, extended to SMS OTPs.

Masked messags, masked OTP pickers, masked URLs you can still open in-browser, PQ-encrypted transfer to the desktop companion, clipboard that auto-clears after 30 seconds.

OTP theft bank accounts in India, police and political benaamis want covers from tax payers, they do identity and credentials theft, hacks other people’s accounts. Under

Modi underarchy of dictatorship, benaamis, rogue traitor spies have invisible drones capable of invisible cameras, speakers, mind reading, … capabilities. They even act like virtual family, virtual friends and tries framing on different identity. Few others tries to say controlling although they dont frame on different identity. Stealing identity and credentials, framing on different identity are cyber mafia. Control - don't know but a form of power dynamics, but I am minding my own business, they are not controlling me. They might still could be part of identity exchanging, buying/selling networks.

With current computing shared codes could be stored and codes can be calculated based on time,, after stealing or recording codes the actual shared code can be guessed. TOTP should be decommissioned and considered obsolete.

I know ALightVPN uses TOTP but some changes are about to happen.

Follow on social media to stay updated on the latest developments:

ALight Technologies USA Inc | Facebook

https://www.facebook.com/ALightTechnologyAndServicesLimited

Web Veta | Facebook

WebVeta Saas | LinkedIn

https://www.linkedin.com/company/alight-technologies-usa-inc/

https://www.linkedin.com/company/alight-technology-and-services-limited/

https://twitter.com/ALightTech

https://www.youtube.com/@alighttechnologyandservicesltd

https://blog.alightservices.com/

https://medium.com/@ALlightTechnologyAndServices

Best regards,

Mr. Kanti Arumilli

Sunday, October 11, 2026

ALightVPN’s Offer: Two Years of Post-Quantum VPN for $23.76

Dussehra, Diwali, Hanukkah, Thanks Giving, Christmas, New Years and Sankranthi offer I am announcing limited ALightVPN offer: two years of post-quantum VPN access for $23.76, renewing at the same price.

I thank Microsoft for Startup Founders, Corporate Vision Magazine, Government of U.K, Perplexity, NASSCOM 10000, my parents, my elder sister.

Whether you’re travelling during the festive season, working remotely, or connecting to shared Wi-Fi, it’s a good time to think about the privacy of your internet connection. Our Dussehra offer gives you an affordable way to try ALightVPN and decide whether it fits your everyday needs.

There are 19 spots available for this promotion. No coupon code is required.

The offer includes:

Two years of PQ VPN access for $23.76
Renewal at the same price
A 7-day trial
A 14-day cancellation option
No coupon code required
19 spots available (more spots might be added soon…)

The total price of $23.76 for 24 months works out to $0.99 per month equivalent. Renewal at the same price also gives you a clear basis for planning your next subscription period.

We want the offer to be easy to understand: a stated two-year price, the same renewal price, and an opportunity to try the service before making a longer commitment. My promise for my first 1000 – 2000 customers, gets same renewal offer, previews and invites for new features.

ALightVPN uses hybrid post-quantum key exchange based on ML-KEM-768, alongside classical cryptography. ML-KEM is standardized by NIST in FIPS 203 and is designed to establish shared secret keys that resist attacks from future quantum computers. (ALightVPN)

For day-to-day browsing, a VPN creates an encrypted connection between your device and the VPN server. That adds a layer of protection when you connect through a hotel, airport, café, or another shared network. It can also be useful for remote workers and developers who regularly access online work platforms. (ALightVPN)

A VPN works alongside other security habits, including HTTPS, software updates, strong passwords, and multi-factor authentication. Keeping these protections together gives you a more complete approach to online security.

The 7-day trial is your opportunity to evaluate ALightVPN on the devices and networks you actually use. Try your normal browsing and work activities, check how the connection performs, and decide whether the service suits you. The offer also includes a 14-day cancellation option.

To get started: