Cloudflare Introduces Post-Quantum GeoKey Manager to Restrict Private Key Use
Cloudflare announced PQ GeoKey Manager, incorporating post-quantum cryptography to let enterprises limit private key decryption to designated server regions. In closed beta, the service is slated for general release in Q1 2027.
Cloudflare introduced PQ GeoKey Manager with post-quantum cryptography to let firms restrict private key decryption to approved regional servers. It uses symmetric regional root keys and checks server hardware identity and location. Now in closed beta with a Q1 2027 target, it initially supports Cloudflare One. Cloudflare notes that traffic routing and data processing after decryption still require separate localization controls.
Key takeaways
- The system adopts a hybrid classical and post-quantum key mechanism, granting decryption keys only to authenticated regional servers.
- Currently in closed beta with a Q1 2027 launch goal, it will initially support Cloudflare One and later expand to CDN services.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.