4 ms·

Right? Does TLS1.3 have the underpinnings to use quantum-proof encryption algos? https://en.wikipedia.org/wiki/Post-quantum_cryptography https://en.wikipedia.o

Right? Does TLS1.3 have the underpinnings to use quantum-proof encryption algos? https://en.wikipedia.org/wiki/Post-quantum_cryptography https://en.wikipedia.org/wiki/Post-quantum_cryptography https://www.microsoft.com/en-us/research/project/post-quantum-tls/ https://www.microsoft.com/en-us/research/project/post-quantu... https://www.forbes.com/councils/forbestechcouncil/2024/10/09/what-nists-post-quantum-cryptography-announcement-means-for-tlsssl-certificates/ https://www.forbes.com/councils/forbestechcouncil/2024/10/09...

bangaladore 2y ago
It seems you can get TLS 1.3 (or atlest slighty modified 1.3) to be quantum secure, but it increases the handshake size by roughly 9x. Cloudflare unfortunately didn't mention much about the other downsides though. https://blog.cloudflare.com/kemtls-post-quantum-tls-without-signatures/ https://blog.cloudflare.com/kemtls-post-quantum-tls-without-...
- bwesterb 2y ago
  About one third of traffic with Cloudflare is already using post-quantum encryption. https://x.com/bwesterb/status/1866459174697050145 https://x.com/bwesterb/status/1866459174697050145 Signatures still have to be upgraded, but that's more difficult. We're working on it. http://blog.cloudflare.com/pq-2024/#migrating-the-internet-to-post-quantum-signatures http://blog.cloudflare.com/pq-2024/#migrating-the-internet-t...
SAI_Peregrinus 2y ago
Yes-ish. They're not enabled yet, but post-quantum signatures & KEMs are available in some experimental versions of TLS. None are yet standardized, but I'd expect a final version well before QCs can actually break practical signatures or key exchanges.
- bwesterb 2y ago
  One third of all human traffic with Cloudflare is using a post-quantum KEM. I'd say that counts as enabled. We want that to be 100% of course. Chrome (and derivates) enabled PQ by default. https://radar.cloudflare.com/adoption-and-usage https://radar.cloudflare.com/adoption-and-usage

bangaladore 2y ago

It seems you can get TLS 1.3 (or atlest slighty modified 1.3) to be quantum secure, but it increases the handshake size by roughly 9x. Cloudflare unfortunately didn't mention much about the other downsides though. https://blog.cloudflare.com/kemtls-post-quantum-tls-without-signatures/ https://blog.cloudflare.com/kemtls-post-quantum-tls-without-...

bwesterb 2y ago
About one third of traffic with Cloudflare is already using post-quantum encryption. https://x.com/bwesterb/status/1866459174697050145 https://x.com/bwesterb/status/1866459174697050145 Signatures still have to be upgraded, but that's more difficult. We're working on it. http://blog.cloudflare.com/pq-2024/#migrating-the-internet-to-post-quantum-signatures http://blog.cloudflare.com/pq-2024/#migrating-the-internet-t...

SAI_Peregrinus 2y ago

Yes-ish. They're not enabled yet, but post-quantum signatures & KEMs are available in some experimental versions of TLS. None are yet standardized, but I'd expect a final version well before QCs can actually break practical signatures or key exchanges.

bwesterb 2y ago
One third of all human traffic with Cloudflare is using a post-quantum KEM. I'd say that counts as enabled. We want that to be 100% of course. Chrome (and derivates) enabled PQ by default. https://radar.cloudflare.com/adoption-and-usage https://radar.cloudflare.com/adoption-and-usage