Cloudflare

Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless

Feb 25, 2022Sofía Celi, Goutam Tamvada, Thom Wiggers
Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless
SummaryAI, from the source post

This post details Cloudflare's ambitious initiative to 'post-quantum-ify' its internal connections, starting with TLS. It outlines the challenges of migrating dozens of services across various programming languages to use post-quantum cryptography, focusing on the confidentiality aspect of TLS. The post explains the adoption of a 'hybrid' mechanism combining classical and post-quantum algorithms (Kyber-512 with P-256) for TLS 1.3 key exchange, ensuring security and compliance. It also touches upon the reasons for not immediately migrating the authentication phase of TLS and the services targeted for this initial migration.

More from the Website Security & Threat Management trail