|
| 1 | +--- |
| 2 | +pcx_content_type: reference |
| 3 | +title: PQC support |
| 4 | +sidebar: |
| 5 | + order: 3 |
| 6 | +head: [] |
| 7 | +description: Consider information about post-quantum cryptography at Cloudflare - deployed key agreements and software support. |
| 8 | +--- |
| 9 | + |
| 10 | +Cloudflare's deployment of post-quantum hybrid key agreements is supported by the following [third-parties](#software-support) and is in use within the following [Cloudflare products](#cloudflare-products). |
| 11 | + |
| 12 | +## Software support |
| 13 | + |
| 14 | +### X25519MLKEM768 |
| 15 | +- Default for [Firefox 132+](https://www.mozilla.org/firefox/channel/desktop/) (Beta) |
| 16 | +- Default for [Chrome 131+](https://www.google.com/chrome/beta/) (Beta) |
| 17 | +- Cloudflare's [fork of Go](https://github.com/cloudflare/go) |
| 18 | +- [BoringSSL](https://boringssl.googlesource.com/boringssl/) |
| 19 | + |
| 20 | +### X25519Kyber768Draft00 |
| 21 | + |
| 22 | +- Default for [Chrome 124-130](https://www.google.com/chrome/) on Desktop |
| 23 | + - For older Chrome or on mobile, toggle _TLS 1.3 hybridized Kyber support_ (`enable-tls13-kyber`) in `chrome://flags`. |
| 24 | +- Default for [Edge 124+](https://microsoft.com/edge/) |
| 25 | +- Default for recent [Opera](https://opera.com) and [Brave](https://brave.com) |
| 26 | +- [Firefox 124+](https://www.mozilla.org/firefox) if you turn on `security.tls.enable_kyber` in `about:config` |
| 27 | + - For QUIC/HTTP3, use Firefox 128+ with `network.http.http3.enable_kyber`. |
| 28 | +- Cloudflare's [fork of Go](https://github.com/cloudflare/go) |
| 29 | +- Default for [Go 1.23](https://github.com/golang/go/issues/67061) |
| 30 | +- [BoringSSL](https://boringssl.googlesource.com/boringssl/) |
| 31 | +- Cloudflare's [fork of QUIC-go](https://github.com/cloudflare/qtls-pq) |
| 32 | +- Goutam Tamvada's [fork of Firefox](https://github.com/xvzcf/firefox-pq-demos) |
| 33 | +- [Open Quantum Safe](https://openquantumsafe.org/) C library |
| 34 | +- [Zig 0.11.0+](https://ziglang.org/) |
| 35 | +- [nginx](https://www.nginx.org/) when [compiled with BoringSSL](https://mailman.nginx.org/pipermail/nginx/2023-August/NOISOYU3QTB2DGIYUBGF7CAMQHDI2QLT.html) ([guide](https://blog.centminmod.com/2023/10/03/2860/how-to-enable-cloudflare-post-quantum-x25519kyber768-key-exchange-support-in-centmin-mod-nginx/)) |
| 36 | +- [Caddy HTTP server](https://caddyserver.com/) nightly [compiled with Go 1.23+](https://gist.github.com/bwesterb/2f7bfa7ae689de0d242b56ea3ecac424) |
| 37 | +- [Botan C++ library 3.2.0+](https://botan.randombit.net/) ([instructions](https://github.com/randombit/botan/discussions/3747)) |
| 38 | +- ISRG's fork of [Rustls](https://www.memorysafety.org/blog/pq-key-exchange/) |
0 commit comments