Cloudflare targets 2029 for full post-quantum security

This post announces Cloudflare's accelerated timeline to achieve full post-quantum (PQ) security by 2029, including post-quantum authentication. It details recent breakthroughs in quantum computing hardware (neutral atoms) and algorithms that have shortened the estimated time to break current cryptography (e.g., P-256). The post emphasizes the shift in industry focus from PQ encryption (mitigating harvest-now/decrypt-later attacks) to PQ authentication, which is considered more critical for an imminent Q-Day due to the catastrophic impact of broken authentication. It highlights the prioritization of long-lived keys (root certificates, API auth keys, code-signing certs) and the need to disable quantum-vulnerable cryptography to prevent downgrade attacks. The post also notes the dependency chain for migrating to PQ authentication, which will take years.