Website Security & Threat Management
Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless

Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless

2/25/2022 · Sofía Celi, Goutam Tamvada, Thom Wiggers

What this post added

This post details Cloudflare's ambitious initiative to 'post-quantum-ify' its internal connections, starting with TLS. It outlines the challenges of migrating dozens of services across various programming languages to use post-quantum cryptography, focusing on the confidentiality aspect of TLS. The post explains the adoption of a 'hybrid' mechanism combining classical and post-quantum algorithms (Kyber-512 with P-256) for TLS 1.3 key exchange, ensuring security and compliance. It also touches upon the reasons for not immediately migrating the authentication phase of TLS and the services targeted for this initial migration.

Read the original post ↗