Conventional cryptography is under threat. Upgrade to post-quantum cryptography with Cloudflare Zero Trust.
Mar 17, 2025Sharon Goldberg, Wesley Evans, Bas Westerbaan, John Engates

Summary
This post announces the first phase of end-to-end quantum readiness for Cloudflare's Zero Trust platform, enabling customers to protect corporate network traffic with post-quantum cryptography. It details the 'harvest now, decrypt later' threat and the challenges of deprecating cryptography. The post explains Cloudflare's two-phase migration strategy, focusing on TLS 1.3 key agreement with ML-KEM. It highlights the integration of PQC into Cloudflare Access, WARP device client, and Gateway, and provides technical details on how the Zero Trust platform supports PQC.
More from the Random Number Generation for Security trail
- Support for modern cryptographic algorithms in Workers
- Using AI to chart a course for our post-quantum migration
- Post-quantum authentication to origins is now supported
- Why we cannot wait for better post-quantum signature algorithms
- The White House's post-quantum executive order is an important milestone. It’s time to get to work