ML-KEM
TrialTechniques
A post-quantum key encapsulation mechanism standardized for use in cryptographic protocols.
Why it's here
Placed in Trial: 5 article(s) of evidence from 2 source(s), led by security coverage, with 3 in the last 30 days. Confidence 53%.
Evidence (5)
- 7Cloudflare Blog·10/1/2026framework_updateCloudflare Workers adds modern post-quantum Web Crypto support
Cloudflare Workers now supports post-quantum-resistant algorithms in Web Crypto behind the webcrypto_modern_algorithms compatibility flag. The update adds ML-KEM and ML-DSA primitives, plus related APIs such as key encapsulation, key generation, JWK import/export, and capability checks, helping developers test and validate post-quantum integrations without bundling their own crypto implementations.
- 7Cloudflare Blog·9/29/2026product_launchCloudflare Adds Post-Quantum Encryption Visibility for Domains
Cloudflare has introduced new visibility features that let customers inspect post-quantum TLS 1.3 adoption at the domain level through Logpush, Log Explorer, and the HTTP Traffic Analytics dashboard. The tools expose the key exchange algorithm used on each request, helping users audit readiness, assess compliance, and identify cryptographic gaps as the industry moves toward quantum-safe encryption.
- 8Cloudflare Blog·9/29/2026securityCloudflare adds IPsec protection against quantum downgrade attacks
Cloudflare says it worked with the IETF to develop a mitigation for quantum downgrade attacks on IPsec and has shipped beta support across its IPsec products. The update is intended to prevent attackers from forcing endpoints to fall back to weaker classical cryptography while the Internet transitions to post-quantum cryptography.
- 7Cloudflare Blog·7/9/2026securityCloudflare urges faster adoption of post-quantum signatures
Cloudflare says RSA and ECC will eventually be vulnerable to sufficiently advanced quantum computers, and that migration to post-quantum cryptography is already underway. The company is prioritizing ML-KEM for encryption today and argues that post-quantum signature algorithms, especially ML-DSA for now, are still needed to fully secure authentication systems while better standards continue to mature.
- 6Hacker News·7/2/2026securityDebate intensifies over IETF ML-KEM TLS standardization
A Hacker News post claims the NSA is supporting standardization of draft-ietf-tls-mlkem instead of the combined ietf-tls-ecdhe-mlkem proposal, and argues this would weaken the design. The post says the IETF TLS working group held another vote after an earlier loss, and urges public objections during the last call period.