● Covered by 3 sources · 8 reportsMedium impact8 neutral
Cloudflare Advances Post-Quantum Cryptography Migration with New Tools and IPsec Mitigation
Key points
- Cloudflare aims for full post-quantum readiness by 2029.
- CryptoLabe, an internal AI tool, will manage the migration across Cloudflare's platform.
- New customer tools provide visibility into post-quantum TLS 1.3 encryption adoption.
- Cloudflare collaborated with IETF to mitigate quantum downgrade attacks on IPsec.
- The migration addresses threats from future cryptographically relevant quantum computers.
- Cloudflare Workers now supports ML-KEM and ML-DSA algorithms in its Web Crypto API.
- ML-KEM-768 and ML-KEM-1024 are supported for key encapsulation.
- ML-DSA-44, ML-DSA-65, and ML-DSA-87 are supported for signatures.
- The support is available behind the webcrypto_modern_algorithms compatibility flag.
- Google Cloud released a public Gemini Notebook for PQC preparation.
- The Gemini Notebook consolidates PQC research, blogs, and migration guidance.
- Stephanie Kiel is Head of Cloud Security Policy at Google Cloud.
- Cloudflare launched a post-quantum geographically restricted key manager in closed beta.
- The new PQ GeoKey Manager supports Cloudflare's Data Localization Suite.
- PQ GeoKey Manager ensures customer decryption keys are only accessible within a chosen geography.
- General availability for PQ GeoKey Manager is planned for Q1 2027.
- PQ GeoKey Manager uses a hybrid of ML-KEM-768 and X25519 for key protection.
- PQ GeoKey Manager replaces attribute-based encryption.
- The beta opened on October 23 to existing Data Localization Suite customers.
- The redesign addresses data sovereignty rules and harvest-now, decrypt-later attacks.
- GeoKey Manager first shipped in 2017 for TLS keys.
- GeoKey Manager moved to ciphertext-policy attribute-based encryption in 2022.
- Cloudflare dropped attribute-based encryption because no production-ready post-quantum variant exists.
- Cloudflare dropped attribute-based encryption because customers do not need the large number of regions it was built to express.
- Key protection uses HPKE, defined in RFC 9180.
- The KEM combines ML-KEM-768 and X25519, HKDF-SHA-256 and AES-256-GCM.
- Privacy Pass protocol is used by Cloudflare for abuse protection and privacy.
- Privacy Pass's unlinkability feature is quantum-resistant.
- Quantum computers could allow attackers to forge Privacy Pass tokens.
- Privacy Pass has been deployed for 10 years.
Cloudflare's Post-Quantum Readiness Initiative
Cloudflare is working towards a 2029 deadline for full post-quantum readiness across its platform. This initiative involves transitioning its products to post-quantum encryption and authentication to secure customer traffic against potential threats from future quantum computers. The company states it is taking a "PQ everything!" approach to provide future-proof security as an infrastructure provider.
Internal AI Tool for Migration Management
To manage the large-scale cryptographic migration, Cloudflare is developing an internal AI tool named CryptoLabe. This tool is designed to help product and engineering teams understand cryptographic usage, track migration progress, and identify dependencies on protocols that lack post-quantum plans. CryptoLabe will assist in upgrading to both post-quantum encryption and authentication.
Enhanced Visibility for Customers
Cloudflare has introduced new post-quantum cryptography visibility tools within its Application Security and Logs products. These tools allow customers to inspect and graph the adoption of post-quantum TLS 1.3 encryption for live traffic. Available through Logpush, Log Explorer, and the HTTP Traffic Analytics dashboard, these features provide per-connection telemetry for auditing post-quantum posture, assessing compliance, and identifying cryptographic gaps across domains.
Mitigating Quantum Downgrade Attacks on IPsec
In collaboration with the IETF, Cloudflare developed and implemented a mitigation against quantum downgrade attacks on IPsec. This addresses the risk where attackers could force connections to use weaker classical cryptography during the transition to post-quantum cryptography, making them vulnerable to future quantum computers. The mitigation has been implemented and is available in beta across Cloudflare's IPsec products.
Addressing Quantum Computing Threats
The migration to post-quantum cryptography is a response to the development of quantum computers, which are expected to be capable of cracking current cryptographic methods like Diffie-Hellman key agreement and classical signature schemes such as ECDSA and RSA. The goal is to replace these with post-quantum schemes like ML-KEM and ML-DSA, which are believed to be resistant to quantum attacks.
Updates
- Privacy Pass protocol is used by Cloudflare for abuse protection and privacy.
- Privacy Pass's unlinkability feature is quantum-resistant.
- Quantum computers could allow attackers to forge Privacy Pass tokens.
- Privacy Pass has been deployed for 10 years.
- PQ GeoKey Manager uses a hybrid of ML-KEM-768 and X25519 for key protection.
- PQ GeoKey Manager replaces attribute-based encryption.
- The beta opened on October 23 to existing Data Localization Suite customers.
- The redesign addresses data sovereignty rules and harvest-now, decrypt-later attacks.
- GeoKey Manager first shipped in 2017 for TLS keys.
- GeoKey Manager moved to ciphertext-policy attribute-based encryption in 2022.
- Cloudflare dropped attribute-based encryption because no production-ready post-quantum variant exists.
- Cloudflare dropped attribute-based encryption because customers do not need the large number of regions it was built to express.
- Key protection uses HPKE, defined in RFC 9180.
- The KEM combines ML-KEM-768 and X25519, HKDF-SHA-256 and AES-256-GCM.
- Cloudflare launched a post-quantum geographically restricted key manager in closed beta.
- The new PQ GeoKey Manager supports Cloudflare's Data Localization Suite.
- PQ GeoKey Manager ensures customer decryption keys are only accessible within a chosen geography.
- General availability for PQ GeoKey Manager is planned for Q1 2027.
- Google Cloud released a public Gemini Notebook for PQC preparation.
- The Gemini Notebook consolidates PQC research, blogs, and migration guidance.
- Stephanie Kiel is Head of Cloud Security Policy at Google Cloud.
- Cloudflare Workers now supports ML-KEM and ML-DSA algorithms in its Web Crypto API.
- ML-KEM-768 and ML-KEM-1024 are supported for key encapsulation.
- ML-DSA-44, ML-DSA-65, and ML-DSA-87 are supported for signatures.
- The support is available behind the webcrypto_modern_algorithms compatibility flag.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
CVE CVE-2023-503877.5 HIGH GitHub cloudflare/crypto-discovery-prompts GitHub panva/jose GitHub panva/hpke GitHub nodejs/node GitHub denoland/denoHow outlets covered it
The Privacy Pass protocol, used by Cloudflare and others for abuse protection and privacy, currently relies on classical cryptography vulnerable to quantum attacks. While its unlinkability feature remains quantum-resistant, future quantum computers could allow attackers to forge tokens and bypass security mechanisms. The developers are working on a new generation of the technology to address these challenges and expand capabilities.
Cloudflare launched a closed beta for its post-quantum GeoKey Manager, which uses a hybrid of ML-KEM-768 and X25519 for key protection. This update replaces the previous attribute-based encryption (ABE) scheme, addressing data sovereignty and harvest-now, decrypt-later attack concerns. General availability is planned for Q1 2027.
Cloudflare introduced a post-quantum geographically restricted key manager in closed beta, supporting its Data Localization Suite. This new PQ GeoKey Manager ensures customer decryption keys are only accessible within a chosen geography, addressing data sovereignty regulations and future-proofing against quantum computing threats.
Google Cloud released a public Gemini Notebook called "Prepare for Post-Quantum Cryptography" to consolidate PQC research, engineering blogs, and migration guidance. This tool helps CISOs and policymakers understand and prepare for the security implications of quantum computing, which could compromise current encryption methods.
Cloudflare Workers now supports post-quantum-resistant algorithms like ML-KEM and ML-DSA within its Web Crypto API. This addition allows developers to experiment with these new cryptographic primitives without bundling separate implementations, aiding in the transition to post-quantum security.
Cloudflare introduced new post-quantum (PQ) cryptography visibility tools within its Application Security and Logs products. These tools allow customers to inspect and graph the adoption of post-quantum TLS 1.3 encryption for live traffic, providing per-connection telemetry to audit their post-quantum posture and identify cryptographic gaps.
Cloudflare collaborated with the IETF to develop and implement a mitigation against quantum downgrade attacks on IPsec. This addresses the risk of attackers forcing connections to use weaker classical cryptography during the transition to post-quantum cryptography, which could be vulnerable to future quantum computers.
Cloudflare is developing an internal AI tool, CryptoLabe, to manage its migration to post-quantum cryptography across its platform by 2029. The tool will help identify cryptographic usage, track migration progress, and flag dependencies on protocols without post-quantum plans. This initiative aims to secure Cloudflare's infrastructure and customer traffic against future quantum computing threats.