Hacker News Reader

Right? Does TLS1.3 have the underpinnings to use quantum-proof encryption algos?

https://en.wikipedia.org/wiki/Post-quantum_cryptography

https://www.microsoft.com/en-us/research/project/post-quantu...

https://www.forbes.com/councils/forbestechcouncil/2024/10/09...

It seems you can get TLS 1.3 (or atlest slighty modified 1.3) to be quantum secure, but it increases the handshake size by roughly 9x. Cloudflare unfortunately didn't mention much about the other downsides though.

https://blog.cloudflare.com/kemtls-post-quantum-tls-without-...

About one third of traffic with Cloudflare is already using post-quantum encryption. https://x.com/bwesterb/status/1866459174697050145

Signatures still have to be upgraded, but that's more difficult. We're working on it. http://blog.cloudflare.com/pq-2024/#migrating-the-internet-t...

Yes-ish. They're not enabled yet, but post-quantum signatures & KEMs are available in some experimental versions of TLS. None are yet standardized, but I'd expect a final version well before QCs can actually break practical signatures or key exchanges.

One third of all human traffic with Cloudflare is using a post-quantum KEM. I'd say that counts as enabled. We want that to be 100% of course. Chrome (and derivates) enabled PQ by default. https://radar.cloudflare.com/adoption-and-usage

Reply on news.ycombinator.com