Skip to content

Commit 9507e4d

Browse files
authored
Add PQC support and link out for contributions and connection check (#18842)
- Add note about contributing to keep the listing up-to-date - Add link to pq.cloudflareresearch.com microsite for visitors to check their connection - Update rustls-post-quantum's support to X25519MLKEM768
1 parent d057057 commit 9507e4d

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

src/content/docs/ssl/post-quantum-cryptography/index.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ Post-quantum cryptography (PQC) refers to cryptographic algorithms that have bee
1414

1515
To protect you against the risk of [harvest now, decrypt later](https://en.wikipedia.org/wiki/Harvest_now,_decrypt_later), and considering all the [connections](#three-connections-in-the-life-of-a-request) that take place when your website or application is on Cloudflare, we have deployed and are actively expanding the use of [post-quantum hybrid key agreement](#hybrid-key-agreement).
1616

17-
Refer to [Cloudflare Radar](https://radar.cloudflare.com/adoption-and-usage#post-quantum-encryption-adoption) for current statistics on the adoption of PQ encryption in requests to Cloudflare.
17+
Refer to [Cloudflare Radar](https://radar.cloudflare.com/adoption-and-usage#post-quantum-encryption-adoption) for current statistics on the adoption of PQ encryption in requests to Cloudflare, and visit [pq.cloudflareresearch.com](https://pq.cloudflareresearch.com) to check if your connection is secured using PQ key agreement.
1818

1919
:::caution[TLS 1.3]
2020
Cloudflare post-quantum key agreements are only supported in protocols based on TLS 1.3 (including HTTP/3) and are disabled for websites in [FIPS mode](/cloudflare-one/policies/gateway/http-policies/tls-decryption/#fips-compliance).

src/content/docs/ssl/post-quantum-cryptography/pqc-support.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,14 @@ head: []
77
description: Consider information about post-quantum cryptography at Cloudflare - deployed key agreements and software support.
88
---
99

10-
Cloudflare's deployment of post-quantum [hybrid key agreements](/ssl/post-quantum-cryptography/#hybrid-key-agreement) is supported by different software as listed below.
10+
Cloudflare's deployment of post-quantum [hybrid key agreements](/ssl/post-quantum-cryptography/#hybrid-key-agreement) is supported by different software as listed below. [Contributions](https://github.com/cloudflare/cloudflare-docs/blob/production/CONTRIBUTING.md) to keep the listing up-to-date are welcome!
1111

1212
## X25519MLKEM768
1313
- Default for [Firefox 132+](https://www.mozilla.org/firefox/channel/desktop/) (Beta)
1414
- Default for [Chrome 131+](https://www.google.com/chrome/beta/) (Beta)
1515
- Cloudflare's [fork of Go](https://github.com/cloudflare/go)
1616
- [BoringSSL](https://boringssl.googlesource.com/boringssl/)
17+
- [rustls-post-quantum 0.2.0+](https://crates.io/crates/rustls-post-quantum) ([blog](https://www.memorysafety.org/blog/pq-key-exchange/))
1718

1819
## X25519Kyber768Draft00
1920

@@ -32,5 +33,4 @@ Cloudflare's deployment of post-quantum [hybrid key agreements](/ssl/post-quantu
3233
- [Zig 0.11.0+](https://ziglang.org/)
3334
- [nginx](https://www.nginx.org/) when [compiled with BoringSSL](https://mailman.nginx.org/pipermail/nginx/2023-August/NOISOYU3QTB2DGIYUBGF7CAMQHDI2QLT.html) ([guide](https://blog.centminmod.com/2023/10/03/2860/how-to-enable-cloudflare-post-quantum-x25519kyber768-key-exchange-support-in-centmin-mod-nginx/))
3435
- [Caddy HTTP server](https://caddyserver.com/) nightly [compiled with Go 1.23+](https://gist.github.com/bwesterb/2f7bfa7ae689de0d242b56ea3ecac424)
35-
- [Botan C++ library 3.2.0+](https://botan.randombit.net/) ([instructions](https://github.com/randombit/botan/discussions/3747))
36-
- ISRG's fork of [Rustls](https://www.memorysafety.org/blog/pq-key-exchange/)
36+
- [Botan C++ library 3.2.0+](https://botan.randombit.net/) ([instructions](https://github.com/randombit/botan/discussions/3747))

0 commit comments

Comments
 (0)