Mullvad is the VPN I use. They require no identifying information (not even an email address) and accept Bitcoin as payment. And they're the first VPN I'm aware of that offers potentially post-quantum secure VPN services.
"Mullvad's goal is to make mass surveillance and internet censorship ineffective. While quantum computers are a great opportunity for science, they are also a big threat to privacy, one that needs to be mitigated as soon as possible.
With that in mind, we have been following the post-quantum cryptography field for a few years.
Today, we are happy to announce our public beta of a new feature – a post-quantum secure VPN tunnel.
The post-quantum cryptography field is rapidly evolving, and while a few of the underlying math problems of post-quantum crypto have been well researched, it is still somewhat of an open question as to which ones will turn out post-quantum secure.
The key exchange we are introducing support for today uses New Hope, just as Google did in its experiment last year. However, due to the nature of the threat of quantum computing, our strategy is much more conservative.
Our ambition is to develop a key exchange that uses at least three different algorithms, each based on a different math problem. Assuming that at least one of the algorithms turns out to be post-quantum secure, your traffic will be safe too."
https://mullvad.net/blog/2017/12/8/introducing-post-quantum-vpn-mullvads-strategy-future-problem/
"Mullvad's goal is to make mass surveillance and internet censorship ineffective. While quantum computers are a great opportunity for science, they are also a big threat to privacy, one that needs to be mitigated as soon as possible.
With that in mind, we have been following the post-quantum cryptography field for a few years.
Today, we are happy to announce our public beta of a new feature – a post-quantum secure VPN tunnel.
The post-quantum cryptography field is rapidly evolving, and while a few of the underlying math problems of post-quantum crypto have been well researched, it is still somewhat of an open question as to which ones will turn out post-quantum secure.
The key exchange we are introducing support for today uses New Hope, just as Google did in its experiment last year. However, due to the nature of the threat of quantum computing, our strategy is much more conservative.
Our ambition is to develop a key exchange that uses at least three different algorithms, each based on a different math problem. Assuming that at least one of the algorithms turns out to be post-quantum secure, your traffic will be safe too."
https://mullvad.net/blog/2017/12/8/introducing-post-quantum-vpn-mullvads-strategy-future-problem/