Cloudflare launches post-quantum GeoKey Manager in closed beta
Hybrid ML-KEM and X25519 keys replace attribute-based encryption for geo-fenced key distribution
Cloudflare has moved a post-quantum rebuild of its GeoKey Manager into closed beta, replacing the attribute-based encryption used since 2022 with HPKE, which uses a hybrid key encapsulation mechanism combining ML-KEM-768 and X25519. The beta opened on October 23 for existing Data Localization Suite customers, with general availability targeted for the first quarter of 2027.