Post-quantum encryption for Cloudflare IPsec is generally available

This post announces the general availability of post-quantum encryption in Cloudflare IPsec, utilizing the hybrid ML-KEM standard (FIPS 203) for enhanced security against harvest-now-decrypt-later attacks. It details the implementation of the hybrid handshake, which combines classical Diffie-Hellman with ML-KEM for session key derivation. The post highlights successful interoperability testing with Cisco and Fortinet branch connectors, underscoring the importance of industry-wide standards for widespread adoption. It also contrasts this approach with Quantum Key Distribution (QKD), advocating for software-based post-quantum cryptography for Internet-scale deployment and authentication.