Per the NSA, all government software systems deemed NSS (e.g. telecom, weapon systems, intel) will be required to support post quantum cryptography starting in 2027. Curiously, this is another i...

It’s always interesting when stories we’ve been following inside the Tezos ecosystem start showing up in much bigger conversations. Over the past few weeks, we’ve spent a lot of time digging into Quantumnet and the work happening around post-quantum cryptography. This week, that conversation is traveling a little…

The report assesses NI's capabilities, anticipating how quantum technologies and markets may develop, identifying opportunities.

Cloudflare has announced plans to become a public Certificate Authority , expanding its role in securing the global web. The company aims to offer free, automated digital certificates for websites while also preparing the Internet for post-quantum cryptography. A Certificate Authority, or CA, is a trusted organization that issues digital certificates. These certificates let websites use HTTPS, encrypt traffic between visitors and web servers, and prove users are connecting to the correct domain rather than an impersonated site. Cloudflare is not issuing certificates yet. However, it has started the approval process needed to become a widely trusted CA. The company has applied to the root programs operated by Google Chrome, Apple, Microsoft, and Mozilla. These programs decide which Certificate Authorities browsers, operating systems, and devices trust. The company has also signed an agreement to acquire an existing trusted root from GlobalSign. This is important because a newly created root certificate can take years to reach browsers, phones, operating systems, and embedded devices. Public TLS Certificate Issuance Concentrated (source: Cloudflare.com ) An established GlobalSign root is already trusted across many older systems, helping Cloudflare provide broader compatibility once it begins issuing certificates. Cloudflare Launches Free Certificate Authority Cloudflare said its new CA will be based on the Automated Certificate Management Environment, or ACME, protocol. ACME is widely used to automate certificate issuance and renewal. Website operators already using automated certificate services should be able to switch to Cloudflare by changing the ACME directory URL, rather than deploying new tools or rebuilding their certificate management workflow. The move could also improve resilience in the Web Public Key Infrastructure ecosystem. Free certificate issuance is currently concentrated among a small number of providers. Let’s Encrypt, one of the largest free CAs , issues around 10 million certificates per day, supports more than 500 million websites, and surpassed 4 billion active certificates in 2025, according to Cloudflare. A major disruption at a dominant free CA could affect much of the encrypted web. Cloudflare’s planned service is designed to add another high-scale, automated, free alternative. Cloudflare Builds Resilient CA With Automated Renewal (source: Cloudflare.com ) Cloudflare plans to require certificate subscribers to support ACME Renewal Information, defined in RFC 9773. This mechanism lets a CA notify customers when they should replace certificates. It could help Cloudflare spread certificate renewals over time during security incidents, compliance problems, or large-scale revocation events, reducing the risk of sudden certificate expiry and website outages. The company also plans to issue post-quantum Merkle Tree Certificates, or MTCs . These certificates are designed to provide more compact authentication for a future in which post-quantum cryptography may make conventional certificate chains larger and slower during TLS handshakes. Cloudflare is targeting the first production MTC issuance in the first quarter of 2027. The company said it intends to support both classic WebPKI certificates and MTCs from the same CA, enabling organizations to adopt quantum-resistant authentication without operating separate certificate systems. Cloudflare said it will publish reproducible builds for certificate-signing software, attest the hardware security modules that protect CA keys, and operate a public dashboard for issuance health and incidents. The company also plans to use its own CA internally before wider availability, following its “Customer Zero” approach for testing new services at Cloudflare scale. The announcement builds on Cloudflare’s 2014 Universal SSL launch, which provided free TLS to websites behind its network. With a public CA, Cloudflare is moving from being a major consumer of certificates to becoming a direct trust provider for the wider Internet. Cut every SOC alert investigation by 21 min. Power your SOC with instant IOC context for immediate response: Integrate TI Lookup in your SOC The post Cloudflare Launches Free Certificate Authority for the Whole Internet appeared first on Cyber Security News .

**Authors:** Fangqi Dong, Alex Lombardi We prove near-optimal time-space lower bounds for breaking quantum cryptography in the random oracle model. Specifically, we show that a $T$-query adversary with $S$ qubits of non-uniform advice can recover a random key $k$ from the $n$-qubit binary phase state $|ψ_k\rangle \propto \sum_{x} R(k,x) |x\rangle$ with probability at most $O(\frac{T^2 + \sqrt{ST}}{N})$ for $N=2^n$. In contrast, the best known bound for post-quantum one-way functions is $O(\frac{T^2 + ST}{N})$, with a trivial attack at $S = N$. This demonstrates a new advantage of quantum cryptography over classical cryptography: $n$ qubits of communication suffice for security against preprocessing attacks with space up to $N^2$ rather than $N$. Our methodology is simple: express the optimal preprocessing attack as the operator norm of a random matrix, and bound this value in expectation over the random oracle via the trace-moment method. These trace moments have a natural interpretation using compressed oracles [Zhandry, Crypto 2019], which we then analyze. This can be viewed as a simplification and generalization of the approach of Liu [Eurocrypt 2023] for proving time-space tradeoffs for breaking post-quantum cryptography. We also prove the following results: (1) We tighten Liu's analysis of post-quantum PRGs in QROM, achieving a distinguishing advantage bound of $O(\frac{T^2}N + \sqrt{\frac{ST}N})$. (2) For unitary synthesis, we extend the one-query lower bound of Lombardi-Ma-Wright [STOC 2024] to hold against adversaries that can make one arbitrary function query along with polynomially many (adaptive) queries to the random oracle, either before or after the function query. This also interprets the original LMW24 result in terms of compressed oracles. (3) Finally, we prove a tight $O(\frac{\sqrt{S}}N)$ bound for the pseudorandomness of random binary phase states against space $S$ distinguishers.

Post-quantum cryptography (liboqs) for Dart and Flutter with the native library bundled automatically. Wraps the oqs package, with no manual setup. Changelog excerpt: - Initial release - Wraps `oqs`4.1.1 and bundles liboqs 0.16.0 (`liboqs-binaries`release `0.16.0-v2`). - Supports Linux (x64, arm64), macOS (arm64, x64), Windows (x64) and Android.

A global survey finds rising AI security spending, persistent cloud exposure and growing plans to evaluate post-quantum cryptography.

Previously reliant on physically isolated systems, dependable voice communications are now consolidating complex technologies into scalable software architectures. This System of Knowledge assesses Software-Defined Networking, Network Slicing, Separation Kernels, Cross-Domain Solutions and Post-Quantum Cryptography in next-generation high-assurance setups. It establishes an essential basis for building more flexible and secure coordination across critical infrastructure domains.

The demand for post-quantum cryptography is projected to escalate significantly, reaching $2.84 billion by 2030, driven by the risks posed by quantum computing.

A conversation with Rich from 2GuysTek about the Cybersecurity Architect's Handbook, the fundamentals that still matter, and how architects should approach AI, zero trust, quantum readiness, and legac...