Cloudflare sets out a post-quantum path for privacy-preserving Privacy Pass tokens

Cloudflare◼ argues that TLS key agreement and signatures are the top priority for post-quantum migration, and that Privacy Pass, which still relies on RSA and elliptic curves, would let a quantum attacker forge tokens while remaining unconditionally private. Post-quantum signatures are far larger, for example ML-DSA-44 at 2,420 bytes against 64 bytes for ECDSA-P256, so systems will need re-engineering. The proposed MOLE design uses anchors, moderators and an anchor set so that a token hides which issuer created it.

For IT people · Written by AI from 1 source · Wrong?