Random Number Generation for Security
Cloudflare One is the first SASE offering modern post-quantum encryption across the full platform

Cloudflare One is the first SASE offering modern post-quantum encryption across the full platform

2/23/2026 · Sharon Goldberg, Amos Paul, David Gauch

What this post added

This post details the integration of hybrid ML-KEM (Module-Lattice-based Key-Encapsulation Mechanism) for post-quantum encryption into Cloudflare One's SASE platform, specifically within Cloudflare IPsec and the Cloudflare One Appliance. It explains the importance of post-quantum cryptography for future security, the two key migrations (key agreement and digital signatures), and the technical challenges and solutions encountered in adapting IPsec for PQC, contrasting it with TLS's adoption.

Read the original post ↗