Post-quantum encryption for Cloudflare IPsec is generally available
2026-04-30
Cloudflare IPsec now has generally available support for post-quantum encryption via hybrid ML-KEM. We’ve confirmed interoperability with Cisco and Fortinet....
Cryptography
Cloudflare One is the first SASE offering modern post-quantum encryption across the full platform
2026-02-23
We’ve upgraded Cloudflare One to support post-quantum encryption by implementing the latest IETF drafts for hybrid ML-KEM into our Cloudflare IPsec product. This extends post-quantum encryption across all major Cloudflare One on-ramps and off-ramps....
Policy, privacy and post-quantum: anonymous credentials for everyone
2025-10-30
The world is adopting anonymous credentials for digital privacy, but these systems are vulnerable to quantum computers. This post explores the cryptographic challenges and promising research paths toward building new, quantum-resistant credentials from the ground up....
Keeping the Internet fast and secure: introducing Merkle Tree Certificates
2025-10-28
Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships....
Improving the trustworthiness of Javascript on the Web
2025-10-16
There's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we co-authored that adds auditability to the web....
Securing today for the quantum future: WARP client now supports post-quantum cryptography (PQC)
2025-09-24
To prepare for a future where powerful quantum computers come online, we've upgraded our WARP client with post-quantum cryptography....
You don’t need quantum hardware for post-quantum security
2025-09-19
Post-quantum cryptography protects against quantum threats using today’s hardware. Quantum tech like QKD may sound appealing, but it isn’t necessary or sufficient to secure organizations....
Message Signatures are now part of our Verified Bots Program, simplifying bot authentication
2025-07-01
Bots can start authenticating to Cloudflare using public key cryptography, preventing them from being spoofed and allowing origins to have confidence in their identity....
Forget IPs: using cryptography to verify bot and agent traffic
2025-05-15
Bots now browse like humans. We're proposing bots use cryptographic signatures so that website owners can verify their identity. Explanations and demonstration code can be found within the post....
Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
2025-03-25
OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project....
Prepping for post-quantum: a beginner’s guide to lattice cryptography
2025-03-21
This post is a beginner's guide to lattices, the math at the heart of the transition to post-quantum (PQ) cryptography. It explains how to do lattice-based encryption and authentication from scratch....
An early look at cryptographic watermarks for AI-generated content
2025-03-19
It's hard to tell the difference between web content produced by humans and web content produced by AI. We're taking new approach to making AI content distinguishable without impacting performance. ...
Conventional cryptography is under threat. Upgrade to post-quantum cryptography with Cloudflare Zero Trust
2025-03-17
We’re thrilled to announce that organizations can now protect their sensitive corporate network traffic against quantum threats by tunneling it through Cloudflare’s Zero Trust platform....
Chaos in Cloudflare’s Lisbon office: securing the Internet with wave motion
2025-03-17
Cloudflare is now using a wall of waves in our Lisbon, Portugal office to create entropy and strengthen Internet security, turning liquid chaos into secure, unpredictable encryption....
A look at the latest post-quantum signature standardization candidates
2024-11-07
NIST has standardized four post-quantum signature schemes so far, and they’re not done yet: there are fourteen new candidates in the running for standardization....
NIST’s first post-quantum standards
2024-08-20
NIST has published the first cryptographic standards for protecting against attacks from quantum computers. Learn what this means for you and your organization....
Cloudflare now uses post-quantum cryptography to talk to your origin server
2023-09-29
Starting today, you can secure the connection between Cloudflare and your origin server with post-quantum cryptography...
No, AI did not break post-quantum cryptography
2023-03-16
The recent news reports of AI cracking post-quantum cryptography are greatly exaggerated. In this blog, we take a deep dive into the world of side-channel attacks and how AI has been used for more than a decade already to aid it...
Inside Geo Key Manager v2: re-imagining access control for distributed systems
2023-01-27
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption....
Defending against future threats: Cloudflare goes post-quantum
2022-10-03
The future of a private and secure Internet is at stake; that is why today we have enabled post-quantum cryptography support for all our customers...
