Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
2025-03-25
OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project....
Continue reading »
Prepping for post-quantum: a beginner’s guide to lattice cryptography
2025-03-21
This post is a beginner's guide to lattices, the math at the heart of the transition to post-quantum (PQ) cryptography. It explains how to do lattice-based encryption and authentication from scratch....
An early look at cryptographic watermarks for AI-generated content
2025-03-19
It's hard to tell the difference between web content produced by humans and web content produced by AI. We're taking new approach to making AI content distinguishable without impacting performance. ...
Conventional cryptography is under threat. Upgrade to post-quantum cryptography with Cloudflare Zero Trust
2025-03-17
Security WeekPost-QuantumZero TrustCloudflare GatewayCloudflare AccessClientlessCloudflare TunnelCryptographyResearch
We’re thrilled to announce that organizations can now protect their sensitive corporate network traffic against quantum threats by tunneling it through Cloudflare’s Zero Trust platform....
Chaos in Cloudflare’s Lisbon office: securing the Internet with wave motion
2025-03-17
Cloudflare is now using a wall of waves in our Lisbon, Portugal office to create entropy and strengthen Internet security, turning liquid chaos into secure, unpredictable encryption....
MORE POSTS
November 07, 2024 2:00 PM
A look at the latest post-quantum signature standardization candidates
NIST has standardized four post-quantum signature schemes so far, and they’re not done yet: there are fourteen new candidates in the running for standardization....
- By
August 20, 2024 9:00 PM
NIST’s first post-quantum standards
NIST has published the first cryptographic standards for protecting against attacks from quantum computers. Learn what this means for you and your organization....
- By
September 29, 2023 1:00 PM
Cloudflare now uses post-quantum cryptography to talk to your origin server
Starting today, you can secure the connection between Cloudflare and your origin server with post-quantum cryptography...
- By
March 16, 2023 1:00 PM
No, AI did not break post-quantum cryptography
The recent news reports of AI cracking post-quantum cryptography are greatly exaggerated. In this blog, we take a deep dive into the world of side-channel attacks and how AI has been used for more than a decade already to aid it...
- By
January 27, 2023 2:00 PM
Inside Geo Key Manager v2: re-imagining access control for distributed systems
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption....
- By
October 03, 2022 1:01 PM
Defending against future threats: Cloudflare goes post-quantum
The future of a private and secure Internet is at stake; that is why today we have enabled post-quantum cryptography support for all our customers...
- By
October 03, 2022 1:00 PM
Introducing post-quantum Cloudflare Tunnel
Every connection we make post-quantum secure, we remove one opportunity for compromise: that's why we are announcing post-quantum Cloudflare Tunnel to help you secure every connection to our network...
- By
August 04, 2022 1:00 PM
Experiment with post-quantum cryptography today
The future is post quantum. Enable post-quantum key agreement on your test zone today and get a headstart...
- By
July 08, 2022 5:54 PM
NIST’s pleasant post-quantum surprise
On Tuesday, the US National Institute of Standards and Technology (NIST) announced which post-quantum cryptography they will standardize....
- By
June 28, 2022 12:57 PM
Hertzbleed explained
Hertzbleed is a brand-new family of side-channel attacks that monitors changes on CPU frequency...
- By
March 31, 2022 12:59 PM
Future-proofing SaltStack
This blogpost chronicles the recent CVEs investigation, our findings, and how we are helping secure Salt now and in the Quantum future...
- By
February 25, 2022 4:03 PM
The post-quantum future: challenges and opportunities
The story and path of post-quantum cryptography is clear. But, what are the future challenges? In this blog post, we explore them...
- By
February 25, 2022 4:03 PM
Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless
A big challenge is coming: to change all internal connections at Cloudflare to use post-quantum cryptography. Read how we are tackling this challenge!...
- By
February 24, 2022 11:12 PM
HPKE: Standardizing public-key encryption (finally!)
HPKE (RFC 9180) was made to be simple, reusable, and future-proof by building upon knowledge from prior PKE schemes and software implementations. This article provides an overview of this new standard, going back to discuss its motivation, design goals, and development process...
- By
February 24, 2022 5:30 PM
Building Confidence in Cryptographic Protocols
This blogpost refers to the efforts to use formal/verification/implementation for post-quantum algorithms to achieve better assurance for them. It also touches on our Cloudflare efforts on this...
- By