← Saturday, October 3, 2026SecurityRelease

Cloudflare Workers adds Web Crypto support for ML-KEM and ML-DSA

blog.cloudflare.com by Thibault Meunier 8 min read Editor score 7/10

Workers adds ML-KEM-768/1024 and ML-DSA-44/65/87 APIs behind a compatibility flag, including key encapsulation, signatures, and JWK import and export. The primitives let developers test post-quantum integrations without bundling a separate implementation, though they are not a full migration path.

What: Cloudflare Workers adds Web Crypto support for post-quantum ML-KEM key encapsulation and ML-DSA signatures.
How: ML-KEM lets one side encapsulate shared key material to a public key for the private-key holder to recover; ML-DSA supports signing and verification.
Why it matters: Engineers can experiment with post-quantum primitives through Web Crypto instead of bundling separate JavaScript or WebAssembly implementations.

ML-KEM encapsulates shared key material with a public key and recovers it with the private key. Sketched from the article's own text.

Read on blog.cloudflare.com →

Discussion

Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.