Towards Post-Quantum Cryptography in TLS

What this post added

This post details Cloudflare's involvement in experimenting with and deploying post-quantum (PQ) cryptographic algorithms for TLS connections. It describes the motivation behind PQ cryptography, the NIST standardization process, and the characteristics of different PQ algorithm families. Cloudflare, in collaboration with Google, is conducting a large-scale experiment to evaluate the performance of key-exchange algorithms like NTRU-based HRSS-SXY and isogeny-based SIKE in real-world TLS handshakes. The experiment aims to collect client- and server-side telemetry to understand latency impacts, network behavior, and the trade-offs between speed and key size for these PQ algorithms.