Cloudflare Workers Adds Native Support for Post‑Quantum Cryptography

Cloudflare has extended its Workers runtime to expose post‑quantum primitives from the Web Crypto API. The new flag‑controlled APIs support ML‑KEM‑768, ML‑KEM‑1024, ML‑DSA‑44, ML‑DSA‑65, and ML‑DSA‑87, allowing developers to encapsulate keys, generate signatures, and import/export JWKs without bundling external libraries. The implementation is built on workerd’s V8‑based runtime and BoringSSL, and includes Web Platform Tests and TypeScript definitions. While the feature is opt‑in and not a full migration path, it gives developers a practical way to prototype protocols such as HPKE, JWT signing, and OHTTP in a production‑ready environment. The support is currently behind the webcrypto_modern_algorithms flag and is available for ML‑KEM‑768 and ML‑DSA‑44 by default.