KEMTLS: Post-quantum TLS without signatures
Jan 15, 2021Sofía Celi, Thom Wiggers

Summary
This post introduces KEMTLS, a novel mechanism for achieving post-quantum TLS without relying on traditional signatures. It addresses the challenge of larger post-quantum cryptographic primitives by replacing handshake signatures with key encapsulation mechanisms (KEMs), significantly reducing handshake data size and improving efficiency. Cloudflare has implemented this in Golang's TLS 1.3 suite, demonstrating a commitment to future-proofing internet security against quantum computing threats.
More from the Email Infrastructure & Protocols trail
- Cloudflare DMARC Management is now generally available
- Email for agents - Cloudflare Email Service now in public beta
- Announcing Cloudflare Email Service’s private beta
- The role of email security in reducing user risk amid rising threats
- How Cloudflare Cloud Email Security protects against the evolving threat of QR phishing