Cloudflare targets 2029 for full post-quantum security

Cloudflare accelerates its post-quantum roadmap to achieve full PQ security including authentication by 2029.

• •Google announced a breakthrough quantum algorithm to break P-256 (elliptic curve cryptography), verified with a zero-knowledge proof
• •Oratomic showed P-256 can be broken with only 10,000 qubits on a neutral atom computer, far fewer than previously estimated
• •Industry focus is shifting from PQ encryption to PQ authentication, as an imminent Q-Day makes credential forgery catastrophic
• •Long-lived keys such as root certificates, API auth keys, and code-signing certs are the highest-priority targets for quantum attackers
• •Disabling quantum-vulnerable cryptography is required to prevent downgrade attacks, with PQ HSTS and certificate transparency as mitigation options