Cloudflare expands post-quantum security in Zero Trust Network

Cloudflare has announced the expansion of its post-quantum cryptography support within its Zero Trust Network Access solution, marking it as the first cloud-native solution of its kind.

Organisations can now immediately benefit from the ability to securely route communications from web browsers to corporate web applications using end-to-end quantum-safe connectivity.

Cloudflare plans to broaden this support by mid-2025 to include all IP protocols, which will enhance compatibility with a wider range of corporate applications and devices.

As quantum computing nears practical reality, the security of online encrypted data is increasingly at risk.

Current encryption methods may be vulnerable to quantum attacks, potentially exposing sensitive data secured under traditional cryptographic algorithms.

The National Institute of Standards and Technology has proposed phasing out these traditional algorithms by 2030, highlighting the urgency to shift to post-quantum cryptography.

Cloudflare reports contributing to industry standards and providing post-quantum security by default for all customers without added cost.

Cloudflare's stated commitment is reflected in its efforts to provide post-quantum security for Internet communications, aiding companies in the transition with minimal complexity. Matthew Prince, co-founder and CEO at Cloudflare, emphasised the company's vision in this arena, noting, "Cloudflare has long committed to making post-quantum security the new baseline for Internet security, delivering it to all customers so we can bolster defences against future quantum threats."

"Now, we're offering that protection built directly into our Zero Trust solutions. We want every Cloudflare customer to have a clear path to quantum safety, and we are already working with some of the most innovative banks, ISPs, and governments around the world as they begin their journeys to quantum security. We will continue to make advanced cryptography accessible to everyone, at no cost, in all of our products."

Since 2017, Cloudflare has focused on the development and standardisation of post-quantum cryptography, with over 35 percent of the traffic interacting with its global network already benefitting from this level of protection. Their quantum-safe Zero Trust Network Access (ZTNA) solutions are designed to safeguard data against the future possible threats posed by quantum computing.

This infrastructure allows organisations to guard against "harvest-now decrypt later" attacks, where current encrypted data is captured with the hope of being decrypted once advanced quantum computers become available. Tom Patterson, emerging technology security lead at Accenture, commented on the urgency of this transition, "The world has five years to replace vulnerable cryptography with post-quantum solutions. To meet this urgent client need, Accenture and Cloudflare offer a hybrid approach, enabling an iterative, low-risk migration while maintaining compatibility and cryptographic agility."

Furthermore, the solution now allows end-to-end quantum security for corporate web applications, supporting systems such as HR and collaboration platforms without individual upgrades.

The forthcoming extension to all network protocols by mid-2025 will provide organisations with the means to secure Internet traffic more comprehensively through devices equipped with Cloudflare's WARP device client.

Cloudflare's advancement presents an opportunity for organisations to pre-emptively secure their infrastructures against quantum-based threats and aligns with industry calls for transitioning to quantum-safe methodologies.