Skip to content
Sign in
StableAgricultureReported 2026-10-24 02:06

Cloudflare launches post-quantum geographically restricted key manager in closed beta

Cloudflare introduces a post-quantum geographically restricted key manager as part of its Data Localization Suite, ensuring decryption keys are only accessible within a customer's chosen geography. The system uses hybrid ML-KEM-768 and X25519 protection with regional root keys to resist harvest-now-decrypt-later attacks while preserving regional boundaries.

Why it matters. Organizations in regulated sectors such as finance, healthcare, and defense that require data sovereignty and long-term quantum-resistant encryption can now enforce geographic key-use boundaries at Cloudflare's scale, addressing both…

01

Who and what it touches

Web Application Firew…usesOpenAIpartners withChinaoperates inCloudflare customersservesCloudflare OHTTP Gate…producesdigital signaturesuppliesCloudflare

From Cloudflare

Each line is a relation with evidence behind it, drawn in the direction it points. A line shows that two things are connected, not how far this change reaches.

02

Evidence

  • CCloudflare BlogCompany2026-10-24 02:06
    Cloudflare therefore uses hybrid ML-KEM-768 and X25519 protection
    View source