Cloudflare Tests Quantum-Resistant Keys to Lock Data by Region

A private encryption key that cannot be unwrapped outside its designated country is the central idea behind Cloudflare's newest security tool. The company has begun a closed beta of its Post-Quantum GeoKey Manager, a system built into its Data Localization Suite that restricts exactly where customer private keys can be decrypted across its global network. The feature is designed to withstand both present-day attacks and future ones powered by quantum computers, with general availability planned for the first quarter of 2027.

Why geography and cryptography are converging

Enterprises operating across borders face a persistent tension: data must move fast across a distributed network to stay fast and reliable, yet regulators increasingly demand that sensitive information, and the keys that unlock it, never leave a specific jurisdiction. Rules like the European Union's GDPR and various financial-sector locality mandates have pushed cloud providers to build infrastructure that can prove, not just promise, where decryption actually happens. Cloudflare first addressed this with geographic key isolation in 2017 and refined it in 2022 using attribute-based encryption to handle more flexible, multi-region policies. The newest redesign responds to a different pressure entirely: the advancing timeline of quantum computing.

The quantum problem hiding in today's encrypted traffic

Security researchers have long warned about "Harvest Now, Decrypt Later" attacks, in which adversaries capture encrypted data today with the expectation that future quantum computers will be able to break the cryptography protecting it. Data with a long shelf life, financial records, health information, government communications, is especially exposed, since it may still matter years or decades from now. Because no production-ready, standardized post-quantum version of the attribute-based encryption Cloudflare previously relied on exists yet, the company rebuilt its approach around Hybrid Public Key Encryption, following the IETF's RFC 9180 standard. The new system pairs ML-KEM-768, a lattice-based algorithm standardized by NIST under FIPS 203, with the classical elliptic-curve method X25519. Running both in tandem means an attacker would need to break both the quantum-resistant and classical layers simultaneously, a dual-lock design that protects confidentiality even if one method is eventually compromised.

How the system enforces its borders

The architecture separates the encrypted data itself from the keys needed to read it. Ciphertext, wrapped with public application-specific keys, travels freely across Cloudflare's edge through its Quicksilver key-value store. The symmetric regional root keys required to actually unwrap that data never touch that distribution path; instead, they are issued only through a control-plane service backed by on-premises HashiCorp Vault clusters. Before any edge server can receive a regional root key, it must prove its physical location and identity using its hardware Trusted Platform Module, verified against Cloudflare's internal inventory system. Keys are then loaded only into volatile memory, never written to disk, so a reboot or power cycle erases them automatically. If a server outside the authorized region ever receives a request needing a key it does not hold, the system is built to fail closed, rejecting the request outright rather than risk improper cross-border decryption.

• Hybrid encryption combines ML-KEM-768 (post-quantum) with X25519 (classical) under the HPKE standard.
• AES-256-GCM and HKDF-SHA-256 handle authenticated encryption and key derivation.
• Hardware attestation via TPM 2.0 confirms a server's physical location before it can access regional keys.
• Keys live only in volatile memory and are wiped on reboot, never stored on disk.

What comes next

The beta is currently limited to enterprise customers using Cloudflare One's Zero Trust products, including Magic WAN, Tunnel, and Gateway, with broader integration across Cloudflare's content delivery network expected before the 2027 general release. The approach reflects a wider shift in the industry: as quantum computing research matures, companies managing sensitive data at scale are being pushed to adopt hybrid cryptographic models now, rather than waiting for a quantum threat that may arrive with little warning. For organizations bound by strict data sovereignty rules, the ability to prove, cryptographically and physically, where a key was unlocked may become as important as the strength of the encryption itself.