Quantum computing could disrupt today’s internet security, but a standards-aligned move to post-quantum cryptography offers a safe, practical path. This post explains PQC basics, Cloudflare’s hybrid TLS approach, and concrete steps for organizations to begin migrating.
Uses your browser voice to read the article content.
Quantum computers could render widely used public-key cryptography vulnerable, potentially compromising data in transit for sensitive connections. The long-term risk is real, especially for archived data that needs confidentiality years from now. While practical quantum machines capable of breaking current cryptography at scale do not yet exist, researchers and standards bodies are actively preparing for this future with post-quantum cryptography (PQC).
Key ideas to know now:
To balance security today with readiness for tomorrow, Cloudflare is adopting a hybrid approach that combines traditional cryptography with post-quantum algorithms during TLS handshakes. This strategy preserves compatibility with existing clients while gradually migrating to quantum-safe options. You can learn more about our PQC resources in downloads or follow research updates in our AI cryptography work.
For threat context and ongoing monitoring, see Radar threat intelligence and our official announcements in the blog.
Our plan emphasizes phased adoption aligned with evolving standards. We start with data that has long-term confidentiality needs, pilot hybrid configurations, and gradually expand as PQC candidates become standardized and mature. This reduces risk and minimizes user disruption.
PQC selection and hybrid configurations can influence latency and key management. Cloudflare focuses on sensible defaults, monitoring, and graceful fallbacks to keep performance stable while raising resilience against quantum threats.
Standards bodies such as NIST are evaluating and standardizing PQC algorithms. Staying aligned with these developments helps ensure interoperability across the internet ecosystem. For official standards, see NIST Post-Quantum Cryptography project.
Organizations can begin by assessing their cryptographic inventory, identifying data with long confidentiality needs, and planning a PQC transition. Explore our resources and services to start the journey: Cloudflare security services, PQC readiness resources, threat intelligence with Radar, and Cloudflare blog.
For background reading, see official PQC discussions at Cloudflare Learning Center on PQC.
External reference: Visit Quantum.gov for a high-level view of national quantum initiatives.
