Support for modern cryptographic algorithms in Workers

Cloudflare Workers has introduced opt-in Web Crypto support for post-quantum algorithms, including ML-KEM for key encapsulation and ML-DSA for digital signatures, enabling developers to experiment with quantum-resistant cryptography without bundling separate JavaScript or WebAssembly implementations. Available behind the `webcrypto_modern_algorithms` compatibility flag while the relevant specification remains in draft, the implementation includes APIs for encapsulating and decapsulating shared secrets, deriving public keys from private keys, checking runtime support, and importing or exporting keys as JWKs. ML-KEM can support protocols such as HPKE and OHTTP by providing shared key material for encryption schemes, while ML-DSA can be used for operations such as signing JWTs through libraries that delegate cryptography to the Workers runtime. Built into the open-source workerd runtime using BoringSSL primitives, the initial release supports ML-KEM-768, ML-KEM-1024, ML-DSA-44, ML-DSA-65, and ML-DSA-87, though not ML-KEM-512, and it does not yet include other proposed modern Web Crypto features such as SHA-3, ChaCha20-Poly1305, cSHAKE, TurboSHAKE, or native HPKE. Cloudflare emphasizes that these APIs are foundational tools rather than a complete migration solution, and notes that larger post-quantum keys, signatures, and ciphertexts remain an operational consideration.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.