● Covered by 1 source · 1 reportMedium impact
Cloudflare moves to post-quantum cryptography with ML-KEM and ML-DSA
Cloudflare is transitioning its encryption methods to ML-KEM and ML-DSA to address quantum computing threats. The U.S. NIST standardized these algorithms in 2024, and Cloudflare aims for full post-quantum security by 2029.
Key points
- Cloudflare is adopting ML-KEM encryption and ML-DSA signatures.
- These algorithms were standardized by NIST in 2024.
- Cloudflare targets full post-quantum security by 2029.
Transitioning to Post-Quantum Cryptography
Cloudflare is migrating its encryption and signature mechanisms to post-quantum algorithms, specifically ML-KEM and ML-DSA. This change addresses the anticipated vulnerabilities posed by quantum computers to classical cryptographic methods like RSA and ECC.
Standardization and Current Usage
The ML-KEM encryption and ML-DSA signatures were standardized by the U.S. National Institute of Standards and Technology (NIST) in 2024 after a comprehensive international competition. Notably, the majority of traffic handled by Cloudflare is currently utilizing ML-KEM for enhanced security against potential quantum attacks.
Future Goals and Current Limitations
Cloudflare aims to achieve full post-quantum security by 2029. However, the existing ML-DSA algorithm presents challenges, such as larger data sizes and limitations compared to RSA and ECC. NIST is actively working on advancing more efficient post-quantum signature schemes.
The Importance of Continued Development
Despite the immediate need for ML-DSA, the pursuit of more effective post-quantum signature algorithms remains critical. This focus is essential to ensure robust security measures are in place as quantum computing technology advances.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub fancy-cryptography/fancy-cryptography GitHub fixed-point-fndsa/fxp-falcon-py CVE CVE-2023-503877.5 HIGHReporting from
Cloudflare is transitioning its encryption methods to ML-KEM and ML-DSA to address quantum computing threats. The U.S. NIST standardized these algorithms in 2024, and Cloudflare aims for full post-quantum security by 2029.