http://ciisqbg45nggykdl6rjdrq3wc64csga4vkphu66qsi65mypeitqedoad.onion/blog/pq-openvpn
Caveats In these new ML-DSA-87 OpenVPN instances, only authentication is post-quantum . The key exchange and encryption still rely on classical algorithms: Key Exchange : TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384 (or TLS_AES_256_GCM_SHA384 in TLS 1.3) uses ECDHE (Elliptic Curve Diffie-Hellman Ephemeral), which is not quantum-resistant.