Cloudflare announced that it has implemented state-of-the-art quantum-resistant encryption across its Security Access Service Edge (SASE) platform, Cloudflare One. This expanded protection range extends from zero-trust access control to Transport Layer Security (TLS) and IPsec-based wide area network (WAN) connections.

Cloudflare disclosed this on February 25th. The company said it has been testing and integrating quantum-resistant standards across its network since 2017, and that by 2025, it would be introducing quantum-resistant capabilities to its cloud-native Secure Web Gateway (SWG) and zero-trust solutions. This time, it expanded its scope to include IPsec and dedicated appliances.

The potential for quantum computing advancements has prompted a re-examination of the security of existing public-key cryptography systems. The U.S. National Institute of Standards and Technology (NIST) is gradually standardizing quantum-resistant cryptography algorithms starting in 2022 and recommends transitioning existing algorithms around 2030. The industry is also discussing the threat of "harvest now, decrypt later," where attackers collect currently encrypted data in advance and then attempt to decrypt it later using a quantum computer.

Against this backdrop, this move is interpreted as part of a broader push to transition encryption across corporate networks to quantum-resistant systems. Cloudflare explained that it has expanded its quantum-resistant experience in TLS to the IPsec domain, broadening the scope of protection to include inter-data center traffic and branch office connections. Furthermore, it added that it has considered integration with existing infrastructure by maintaining global network-based automatic path switching and standards-based interoperability.

CEO Matthew Prince stated that the goal is to provide long-term secure connectivity without requiring separate hardware replacement or complex setup. Industry observers believe that the phased introduction of quantum-resistant encryption, driven by network operators, will impact corporate security strategies, as the transition to quantum-resistant encryption is not a short-term undertaking.