Cloudflare charts the post-quantum future of Privacy Pass, where signatures balloon 38x

Cloudflare Blog · rss · 2026-11-06

Cloudflare analyzes post-quantum risks for Privacy Pass: quantum attackers could forge tokens, but unconditional privacy survives Q-day. The new MOLE framework hides even the token issuer's identity; the main obstacle is size — ML-DSA-44 signatures are 2,420 bytes vs 64 for ECDSA — forcing a system redesign and decoupling parameter choice from protocol design.

Original post →

More from Safety

Safety channel →