
2/23/2026 · Sharon Goldberg, Amos Paul, David Gauch
What this post added
This post details the integration of hybrid ML-KEM (Module-Lattice-based Key-Encapsulation Mechanism) for post-quantum encryption into Cloudflare One's SASE platform, specifically within Cloudflare IPsec and the Cloudflare One Appliance. It explains the importance of post-quantum cryptography for future security, the two key migrations (key agreement and digital signatures), and the technical challenges and solutions encountered in adapting IPsec for PQC, contrasting it with TLS's adoption.