Using AI to chart a course for our post-quantum migration
This post details the development of CryptoLabe, an AI-powered internal tool designed to manage Cloudflare's post-quantum (PQ) migration. CryptoLabe uses AI models to scan codebases, identify cryptographic usage (classical encryption, signatures, tokens, and PQ-ready hybrid key exchange), and classify findings. It operates in two stages: discovery (mapping repositories and searching for crypto usage) and analysis (re-checking observations, investigating runtime usage, and assigning classifications). The tool is built on Cloudflare's Developer Platform using Workers, Durable Objects, and D1, and leverages Agents SDK for orchestration. The post highlights the challenges of discovering cryptography in large codebases and the benefits of AI for this task, aiming to achieve full PQ readiness by 2029.
More from the Random Number Generation for Security trail
- Support for modern cryptographic algorithms in Workers
- Post-quantum authentication to origins is now supported
- Why we cannot wait for better post-quantum signature algorithms
- The White House's post-quantum executive order is an important milestone. It’s time to get to work
- Post-quantum encryption for Cloudflare IPsec is generally available