Research & Development Approach

2/24/2022

This post introduces the concept of formal analysis and mathematical proofs for cryptographic protocols, using KEMTLS as an example. It details how process algebras and tools like Tamarin are used to model protocols, simulate runs, and build confidence in their security, especially in the context of post-quantum cryptography. This demonstrates a deep dive into the rigorous, research-driven approach to ensuring the security of core technologies.

2/24/2022

This post introduces Cloudflare's application of formal verification and analysis techniques, specifically using EasyCrypt and Jasmin, to ensure the correctness and security of cryptographic implementations, particularly in the context of post-quantum cryptography. It details the goals of such processes, which include proving algorithm security properties and verifying implementation correctness, memory safety, and constant-time execution. The post also contrasts computational analysis (used by EasyCrypt) with symbolic analysis (used by Tamarin) and explains the 'indistinguishability game' as a model for cryptographic security.

2/22/2022

This post delves into the foundational mathematics and algorithmic construction of post-quantum key encapsulation mechanisms (KEMs), specifically focusing on FrodoKEM. It explains the necessity of post-quantum cryptography due to the threat of quantum computers to current encryption standards, introduces the concept of KEMs and their three core algorithms (Generate, Encapsulate, Decapsulate), and details the Learning With Errors (LWE) problem as the mathematical basis for FrodoKEM's security. It also touches upon the relationship between LWE and lattice-based cryptography.

11/2/2021

This post details Cloudflare's pragmatic approach to software delivery, emphasizing team autonomy in choosing methodologies (Waterfall, Agile variants) while establishing common high-level concepts like "SHIPs" and "EPICs" for transparency and collaboration. It outlines a quarterly planning process, continuous delivery, and flexible target dates, all underpinned by strict, simple rules for code deployment to ensure safety and minimize friction. This contributes to the broader R&D approach by defining how ideas are brought to fruition and integrated into products.

10/13/2021

This post announces a major update to the open-source CIRCL cryptographic library, including new packages for pairing-based cryptography and quantum-resistant algorithms. It highlights how this work builds on previous research experiments and product integrations, demonstrating the practical application of cutting-edge cryptographic research within Cloudflare's product development, specifically mentioning applications like identity-based encryption, zk-SNARKS, and drand.

10/11/2021

This post announces the launch of the Cloudflare Research Hub website, a centralized platform for sharing research efforts, publications, and code. It details the technical decisions made in building the website, emphasizing standards-based web development, minimal JavaScript, and the use of Cloudflare Pages. The post also outlines the scope of Cloudflare's research, including network security, privacy, cryptography, authentication, Internet measurements, and distributed systems, and encourages collaboration with external researchers and institutions.

10/11/2021

Introduces a structured Visiting Researcher program to foster collaborations with academia, allowing postdocs and full-time faculty to collaborate with Cloudflare Research for 3-12 months. This program aims to operationalize academic ideas into deployable services and push industry forward, building on previous successful intern and visiting researcher experiences. The program focuses on applied cryptography, privacy, network protocols and architecture, measurement and performance evaluation, and distributed systems.

10/10/2021

This post details Cloudflare Research's operating principles and provides case studies on password security, SSL/TLS recommender, and IP address agility. It highlights the research team's role in identifying and nurturing ideas 3-5 years out, collaborating with product and engineering teams, and incubating ideas from conception to production code. The password security case study describes the development of a privacy-preserving protocol for checking compromised credentials, integrating it into the WAF. The SSL/TLS recommender case study explains how research interns' scanning tools led to a feature that helps customers secure their sites. The IP address agility case study discusses an experiment serving free customers from a single IP in a region to address IPv4 exhaustion.

9/18/2019

This post announces the rebranding of the Cryptography Research team to Cloudflare Research, expanding its scope beyond cryptography to include more areas of computer science research. It details the hybrid research model, emphasizing embedding research engineers into product and operations teams for practical problem-solving and impact-focused, long-term projects. The post highlights open collaboration, open standards, and open source as key components of their approach, citing examples like TLS 1.3 deployment and Privacy Pass. Future focus areas are listed as security and privacy, cryptography, internet measurement, low-level networking and operating systems, and emerging networking paradigms.