ML-DSA
TrialTechniques
A post-quantum digital signature scheme standardized by NIST.
Why it's here
Placed in Trial: 6 article(s) of evidence from 2 source(s), led by security coverage, with 2 in the last 30 days. Confidence 55%.
Evidence (6)
- 7Cloudflare Blog·10/1/2026framework_updateCloudflare Workers adds modern post-quantum Web Crypto support
Cloudflare Workers now supports post-quantum-resistant algorithms in Web Crypto behind the webcrypto_modern_algorithms compatibility flag. The update adds ML-KEM and ML-DSA primitives, plus related APIs such as key encapsulation, key generation, JWK import/export, and capability checks, helping developers test and validate post-quantum integrations without bundling their own crypto implementations.
- 8Cloudflare Blog·9/29/2026securityCloudflare adds IPsec protection against quantum downgrade attacks
Cloudflare says it worked with the IETF to develop a mitigation for quantum downgrade attacks on IPsec and has shipped beta support across its IPsec products. The update is intended to prevent attackers from forcing endpoints to fall back to weaker classical cryptography while the Internet transitions to post-quantum cryptography.
- 8Cloudflare Blog·9/10/2026securityCloudflare 1.1.1.1 adds post-quantum DNSSEC validation
Cloudflare's 1.1.1.1 resolver now validates DNSSEC signatures using ML-DSA-44, a NIST-standardized post-quantum signature algorithm. The move is intended to help the DNS ecosystem prepare for larger post-quantum signatures, compatibility challenges, and future quantum threats.
- 7Cloudflare Blog·7/29/2026securityCloudflare adds post-quantum authentication for origin connections
Cloudflare now supports post-quantum authentication for Authenticated Origin Pulls and Custom Origin Trust Store, enabling mutually authenticated TLS connections to origin servers using ML-DSA signatures. The update extends Cloudflare’s post-quantum roadmap beyond encryption to protect origin traffic against future quantum-enabled impersonation attacks.
- 7Cloudflare Blog·7/9/2026securityCloudflare urges faster adoption of post-quantum signatures
Cloudflare says RSA and ECC will eventually be vulnerable to sufficiently advanced quantum computers, and that migration to post-quantum cryptography is already underway. The company is prioritizing ML-KEM for encryption today and argues that post-quantum signature algorithms, especially ML-DSA for now, are still needed to fully secure authentication systems while better standards continue to mature.
- 8The New Stack·7/6/2026securityMicrosoft, Google and Cloudflare Move Quantum-Safe Deadline to 2029
Microsoft, Google and Cloudflare say organizations should prepare to move to post-quantum cryptography by 2029, a year earlier than prior end-of-decade targets. The companies argue that cryptographically relevant quantum computers may arrive sooner than expected, making migration a multi-year security effort that should start now.