Defending against future threats: Cloudflare goes post-quantum
October 03, 2022
The future of a private and secure Internet is at stake; that is why today we have enabled post-quantum cryptography support for all our customers...
Introducing post-quantum Cloudflare Tunnel
October 03, 2022
Every connection we make post-quantum secure, we remove one opportunity for compromise: that's why we are announcing post-quantum Cloudflare Tunnel to help you secure every connection to our network...
Experiment with post-quantum cryptography today
August 04, 2022
The future is post quantum. Enable post-quantum key agreement on your test zone today and get a headstart...
NIST’s pleasant post-quantum surprise
July 08, 2022
On Tuesday, the US National Institute of Standards and Technology (NIST) announced which post-quantum cryptography they will standardize....
Hertzbleed explained
June 28, 2022
Hertzbleed is a brand-new family of side-channel attacks that monitors changes on CPU frequency...
MORE POSTS
February 25, 2022
The post-quantum future: challenges and opportunities
The story and path of post-quantum cryptography is clear. But, what are the future challenges? In this blog post, we explore them...
- By
February 25, 2022
Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless
A big challenge is coming: to change all internal connections at Cloudflare to use post-quantum cryptography. Read how we are tackling this challenge!...
- By
February 24, 2022
HPKE: Standardizing public-key encryption (finally!)
HPKE (RFC 9180) was made to be simple, reusable, and future-proof by building upon knowledge from prior PKE schemes and software implementations. This article provides an overview of this new standard, going back to discuss its motivation, design goals, and development process...
- By
February 24, 2022
Building Confidence in Cryptographic Protocols
This blogpost refers to the efforts to use formal/verification/implementation for post-quantum algorithms to achieve better assurance for them. It also touches on our Cloudflare efforts on this...
- By
February 24, 2022
Using EasyCrypt and Jasmin for post-quantum verification
This blogpost will touch upon how to practically use Jasmin and EasyCrypt to achieve better security guarantees when verifying KEMs...
- By
February 23, 2022
Making protocols post-quantum
Post-quantum key exchange and signature algorithms come with different trade-offs that we’re familiar. How do we handle that when updating protocols, is this an opportunity to revisit the status quo?...
- By
February 22, 2022
Deep dive into a post-quantum key encapsulation algorithm
In this blog post, we will look at what Key Encapsulation Mechanisms are and why they matter in a post-quantum world...
- By
February 22, 2022
Deep dive into a post-quantum signature scheme
How can one attest to an identity and prove it belongs to one self? And how can one do it in the face of quantum computers? In this blog post, we examine these questions and explain what post-quantum signatures are...
- By
February 21, 2022
The post-quantum state: a taxonomy of challenges
At Cloudflare, we strive to help build a better Internet, which means a quantum-protected one. In this post, we look at the challenges for migrating to post-quantum cryptography and what lies ahead using a taxonomy...
- By
February 21, 2022
The quantum solace and spectre
What is quantum computing and what advances have been made so far on this front? In this blog post, we will answer this question and see how to protect against quantum adversaries...
- By
November 08, 2021
Sizing Up Post-Quantum Signatures
How much room does TLS have for the big post-quantum signatures? We had a look: it’s tight....
- By
October 13, 2021
Pairings in CIRCL
Our Go cryptographic library CIRCL announces support for pairing-based cryptography....
- By
October 13, 2021
Exported Authenticators: The long road to RFC
Learn more about Exported Authenticators, a new extension to TLS, currently going through the IETF standardisation process....
- By
February 19, 2021
Using HPKE to Encrypt Request Payloads
Allowing users to securely log parts of the request that match firewall rules while making it impossible for anyone else to decrypt....
- By