
2/25/2022 · Sofía Celi, Goutam Tamvada, Thom Wiggers
What this post added
This post details Cloudflare's ambitious initiative to 'post-quantum-ify' its internal connections, starting with TLS. It outlines the challenges of migrating dozens of services across various programming languages to use post-quantum cryptography, focusing on the confidentiality aspect of TLS. The post explains the adoption of a 'hybrid' mechanism combining classical and post-quantum algorithms (Kyber-512 with P-256) for TLS 1.3 key exchange, ensuring security and compliance. It also touches upon the reasons for not immediately migrating the authentication phase of TLS and the services targeted for this initial migration.