This document defines three hybrid key agreement mechanisms for TLS 1.3 -- X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 -- that combine the post-quantum ML-KEM (Module-Lattice-Based Key E...

On October 1, Cloudflare added ML-KEM and ML-DSA to the Workers Web Crypto API. ML-KEM (FIPS 203) establishes shared secrets, and ML-DSA (FIPS 204) signs and verifies. They are two of NIST's post-quantum standards, and in Workers they now sit behind the same `crypto.subtle` API that browsers expose, together with four encapsulation and decapsulation methods, `getPublicKey()`, a static `SubtleCrypto.supports()`, and JSON Web Keys of type `AKP`. The reason to care is the usual one. Traffic encrypted today can be recorded today and decrypted later, once a large enough quantum computer exists. Moving key agreement and signatures to quantum-resistant algorithms is cheaper before that day than after it, and having them as platform primitives means a web app will not have to ship its own lattice arithmetic in WebAssembly once every engine has them. Cloudflare made the feature opt-in, behind the `webcrypto_modern_algorithms` compatibility flag. I wanted to know two things: does my browser have it, and does my edge? ## One Probe, Two Runtimes In RTCode.io, our real-time HTML playground, a `<script type=worker edge>` element runs in two places. In the playground it is a service worker inside your own browser. Deployed to RTEdge.net, our hosting on Cloudflare Workers for Platforms, the same code runs at the edge. One probe therefore answers both questions. The probe runs 40 checks. Apart from six that only confirm a method exists, none of them stop at "did it throw": * ML-KEM: generate a key pair, encapsulate, decapsulate, and compare the two shared secrets * ML-DSA: sign, verify, and confirm that a tampered message is rejected * The changelog's extras: a shared AES-GCM key through `encapsulateKey()` and `decapsulateKey()`, `getPublicKey()` for both algorithms and an `AKP` JSON Web Key round trip, plus the draft's `raw-seed`, `spki` and `pkcs8` key formats and ML-DSA's `context` parameter * The rest of the WICG draft: ML-KEM-512, the hybrid KEMs including X-Wing, SLH-DSA, ChaCha20-Poly1305, AES-OCB, SHA-3, cSHAKE, TurboSHAKE, KangarooTwelve, KMAC and Argon2, with every hash and Argon2 result compared against published test vectors Most rows also ask `SubtleCrypto.supports()` the same question and record its answer, so a runtime whose claims disagree with its behavior would stand out. Before trusting a column of failures, I ran the same function under Node.js 26 and Deno 2.9, which implement most of the draft. They passed 35 and 36 of the 40 checks, and every known-answer test matched. ## The First Answer Was Zero My browser is Microsoft Edge 153. In the playground, the page and its service worker both scored 0 of 40, because Chromium 153 predates the release that ships these algorithms. The deployed worker also scored 0 of 40. It reported `Cloudflare.compatibilityFlags.webcrypto_modern_algorithms` as `false`, and the runtime said the same thing in its own words: > Key format "raw-secret" requires the webcrypto_modern_algorithms flag. RTEdge.net sets each upload's compatibility date to the current day, so behavior that Cloudflare turns on by default arrives without any action from us. This flag has no default-on date, so no compatibility date turns it on; it has to be listed explicitly. ## One Line on RTEdge.net Every RTEdge.net deployment is uploaded with the same compatibility settings, so enabling the flag took one line: { "compatibility_date": "2026-10-01", "compatibility_flags": [ "no_nodejs_compat", "no_nodejs_compat_v2", "webcrypto_modern_algorithms", "enable_request_signal", "disallow_importable_env" ] } Flags apply at upload, so I redeployed the probe. The edge then passed 18 of 40: exactly the 18 checks that cover ML-KEM, ML-DSA and the methods Cloudflare announced, and nothing else. ML-KEM-768 and ML-KEM-1024 agree on 32-byte shared secrets; ML-DSA-44, ML-DSA-65 and ML-DSA-87 sign and verify; and the AES-GCM, JWK, seed, `spki`, `pkcs8` and `context` round trips all work. ML-KEM-512, the hybrid KEMs including X-Wing, SLH-DSA, ChaCha20-Poly1305, AES-OCB, the hashes, KMAC and Argon2 fail with `NotSupportedError`, as documented, and `SubtleCrypto.supports()` agreed with the actual result on every row it answered. Every RTEdge.net worker deployed from now on has the API, and a worker can check for itself: const enabled = globalThis.Cloudflare?.compatibilityFlags?.webcrypto_modern_algorithms === true; ## When Browsers Follow The edge is ahead of most browsers today. Here is where each engine stands. Post-quantum Web Crypto in Chrome, Firefox and Safari ML-KEM, ML-DSA and the new SubtleCrypto methods, from the first intents to October 1, 2026. Hover, focus or tap a mark for details. * __Behind a flag or Nightly only * __Origin trial * __On by default * __Intent or standards position **The timeline as a table** **Chrome** is first. After a developer trial behind `chrome://flags/#webcrypto-pqc` in Chrome 150 and an origin trial from Chrome 151 to 154, Chrome 155 turns on ML-KEM-768, ML-KEM-1024, ML-DSA-44, ML-DSA-65, ML-DSA-87, X-Wing and ChaCha20-Poly1305 by default, together with all four encapsulation methods, `getPublicKey()` and `supports()`. It reached a small share of desktop users as an early stable release on September 23, and the stable release starts rolling out on October 6. Microsoft Edge follows Chromium, with Edge 155 due the week of October 8. Chrome and Cloudflare Workers overlap on ML-KEM and ML-DSA. X-Wing and ChaCha20-Poly1305 are in Chrome but not yet in Workers, and neither offers ML-KEM-512. **Firefox** landed ML-KEM-512, ML-KEM-768 and ML-KEM-1024 with the four encapsulation methods in Nightly 157 on September 9, where it is on by default. Firefox 157 shipped on September 29 with that code switched off; setting `dom.webcrypto.encapsulation.enabled` in `about:config` turns it on. ML-DSA, X-Wing, `getPublicKey()` and `supports()` are not there yet, and Mozilla's position on the proposal is neutral. **Safari** has no implementation and no flag yet. WebKit's position on the proposal is neutral, with Apple engineers looking at ML-KEM, ML-DSA and SHA-3, which Apple platforms already support in CryptoKit. Its position on hybrid KEMs is support, with Apple looking at implementing X-Wing. Safari 27, released on September 14, does not include them. Server runtimes got there earlier. Node.js 24.7 added ML-KEM and ML-DSA to Web Crypto in August 2025, and Deno followed in June 2026, which is why both could double-check the probe. ## Check Your Browser The card below runs the same 40 checks in this page, next to the edge results recorded on October 1. A check mark means a method exists, a real round trip succeeded or a known-answer test matched; nothing here leaves your browser. Post-quantum Web Crypto, checked live in your browser Running 40 checks in this page… This check needs JavaScript. The recorded edge results are listed in the article above. ## Feature-Detect, Do Not Sniff Support will arrive at different times in different engines, so detect it instead of reading version numbers: const subtle = crypto.subtle; const SubtleCryptoClass = subtle.constructor; const mlKem = typeof SubtleCryptoClass.supports === 'function' ? SubtleCryptoClass.supports('encapsulateBits', 'ML-KEM-768') : await subtle.generateKey('ML-KEM-768', false, ['encapsulateBits', 'decapsulateBits']).then(() => true, () => false); if (mlKem) { const { publicKey, privateKey } = await subtle.generateKey('ML-KEM-768', false, ['encapsulateBits', 'decapsulateBits']); const { sharedKey, ciphertext } = await subtle.encapsulateBits('ML-KEM-768', publicKey); const recovered = await subtle.decapsulateBits('ML-KEM-768', privateKey, ciphertext); // sharedKey and recovered hold the same 32 bytes } Firefox has ML-KEM but no `supports()` yet, so the snippet falls back to trying `generateKey()`. Two more details are easy to miss. Call `supports()` on the class, as `SubtleCrypto.supports(...)` or through `crypto.subtle.constructor`, because Node.js rejects a detached call. And pass complete algorithm parameters: under the draft, and in Node.js, `supports('digest', 'cSHAKE128')` is `false` until you include `outputLength`, and `supports('generateKey', 'AES-OCB')` is `false` until you include `length`; Deno answers `true` either way, so do not rely on the short form. Where it exists, prefer the hybrid X-Wing, registered as `MLKEM768-X25519`. It combines ML-KEM-768 with X25519, so the shared secret stays safe as long as either one holds. ## Post-Quantum on Both Ends RTCode.io is a real-time playground where every keystroke updates the live output, and RTEdge.net deploys what you build there to Cloudflare's edge. As of this week, the edge end of that path speaks post-quantum Web Crypto on every RTEdge.net worker, and the browser end follows as each engine ships it. See what else we build at elefunc.com.

YouTube video by Little Saigon TV Official

Để một ca nâng mũi được gọi là thành công, ngoài việc đảm bảo nét thẩm mỹ tự nhiên và không gây biến chứng thì nâng tầm phong thủy cũng là điều không kém phần

Krown Technologies hat BLOQ Talk veröffentlicht, einen neuen Messaging-Dienst für iOS, Android und Web, der auf eine Verschlüsselung namens Cipher-Lock setzt. Diese kombiniert das NIST-standardisierte ML-KEM-768 mit X25519, während ML-DSA-65 für die Geräteidentität zuständig ist.Gespeicherte Nachrichten werden zusätzlich mit AES-256-GCM verschlüsselt. Damit reiht sich der Dienst in eine wachsende Zahl von Anbietern ein, die ihre […] The post BLOQ Talk: Krown Technologies startet Messenger mit Post-Quanten-Schutz appeared first on BornCity.

Nội dung xếp hạng 1.Mixue Trung Đồng3.6★ (49) 2.Tiệm Kem Bà Ngoại4.2★ (34) 3.Quán Kem Tràng Tiền4.2★ (5) 4.Kem Dừa Mã Lai 19925.0★ (4) 5.Goofoo Gelato TP Bắc Ninh – Kem Đảo Dừa5.0★ (1) Quán kem ở Bắc ...

Mua nhà ở thực hay đầu tư bất động sản thường đi kèm nỗi lo về áp lực vốn tự có ban đầu quá lớn và gánh nặng thanh toán dồn dập. Làm sao để khóa được mức giá tốt giai đoạn đầu mà vẫn giữ được sự thảnh thơi tài chính mỗi tháng? Bài toán này được giải quyết triệt để thông qua chính sách thanh toán The Win City với lộ trình dòng tiền linh hoạt hiếm có trên thị trường.

YouTube video by Kem Arts 3.0

Mua nhà hình thành trong tương lai tại khu vực trung tâm TP.HCM luôn đi kèm bài toán cân nhắc kỹ lưỡng giữa bản vẽ phối cảnh 3D và chất lượng thi công ngoài đời thực. Nhiều nhà đầu tư cũng như khách hàng mua ở thực thường trăn trở về độ hoàn thiện vật liệu, chiều cao trần, khả năng đón sáng tự nhiên hay cảm giác không gian khi bước chân vào tổ ấm tương lai của mình.

YouTube video by Kem Arts 3.0

Dao cắt không phù hợp có thể khiến máy dán thùng carton cắt băng keo kém, dễ kẹt hoặc nhanh hỏng. Khám phá cách chọn dao đúng kích thước, chất liệu và thiết kế theo từng...

Chọn sai dây đai có thể khiến máy đóng đai dùng pin siết không chắc, mối hàn kém hoặc ảnh hưởng độ bền khi vận chuyển. Khám phá cách chọn dây đai theo khổ dây, chất...

YouTube video by Kem Arts 3.0

YouTube video by Kem Arts 3.0

Groups Conversations All groups and messages Sign in Technical - Security Conversations About Privacy • Terms     A closer look at the performance of ML-KEM 0 views Skip to first unread message Eyal Estrin unread, 2:33 PM (10 minutes ago)    to https://redsift.com/blog/post-quantum-mlkem-performance Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

Bộ Y tế đưa ra hướng dẫn mới giúp các địa phương thực hiện chương trình khám sức khỏe định kỳ minh bạch và hiệu quả, giảm thiểu sự phức tạp và tốn kém cho người dân khi cập nhật hồ sơ sức khỏe điện tử.

Ibn al-Shatir, seorang muwaqqit (pengira waktu) di Masjid Umayyah Damsyik, mencipta model astronomi yang luar biasa pada abad ke-14. Modelnya, yang menghapuskan keperluan epicycle dan equant, memiliki persamaan geometri yang mengejutkan dengan sistem heliosentrik Copernicus yang muncul 150 tahun kem