logo

Support for modern cryptographic algorithms in Workers

ID: c866ae96-c85a-5979-8f5b-7916f1cfa9a7

STIX ID: report--c866ae96-c85a-5979-8f5b-7916f1cfa9a7

Feed Name: Cloudflare Blog

Date Published: 2026-10-01

Date Updated: 2026-10-01

Author: Thibault Meunier

...
...

Cloudflare Workers now exposes opt-in post-quantum-resistant Web Crypto primitives (ML-KEM-768/1024 for KEM and ML-DSA-44/65/87 for signatures) and helper APIs (encapsulateBits/decapsulateBits, encapsulateKey/decapsulateKey, getPublicKey, SubtleCrypto.supports, and JWK import/export) behind the webcrypto_modern_algorithms compatibility flag; the post gives usage examples (KEM, DSA, HPKE, JWT signing), implementation notes (workerd backed by BoringSSL), testing details, current limitations, and guidance for developers to experiment with migrating to post-quantum algorithms.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.