Original announcement: Cloudflare · 2026-11-06. Read the official announcement.
Summary of Recent Developments
On November 6, 2026, Cloudflare published insights into the future of web privacy in the post-quantum era. The announcement centers on upgrading cryptographic protocols such as Privacy Pass to resist attacks from quantum computers. Cloudflare highlights a novel cryptographic primitive called MOLE designed to enhance the privacy and security properties of token-based authentication while maintaining client anonymity.
What Happened and Why It Matters
Cloudflare revealed research advances addressing the vulnerabilities of current privacy-preserving web protocols to quantum attacks. Privacy Pass, widely deployed across services like iCloud Private Relay, currently relies on classical cryptographic schemes (e.g., RSA and elliptic curves) that are vulnerable to quantum adversaries capable of forging tokens and bypassing access controls.
Despite these vulnerabilities, Privacy Pass maintains unconditional privacy against linking token issuance and redemption. The new generation of protocols seeks to preserve such privacy guarantees even after “Q-day,” when quantum-capable adversaries become practical.
To achieve this, Cloudflare introduces MOLE (Moderation Of unLinkable Endorsements), a cryptographic object enabling client tokens that not only protect client identity but also hide the issuer’s identity, ensuring equal treatment among clients regardless of issuer. This development is crucial for enhancing privacy and creating a fair, open ecosystem.
Technical Advances Underpinning MOLE
MOLE builds upon blind signature schemes, enabling a client to obtain a signature without revealing the message to the issuer and to later redeem the token anonymously. A breakthrough enabling MOLE’s post-quantum viability is the application of the VOLE-in-the-Head (VOLEitH) zero-knowledge proof system, which creates efficient cryptographic proofs suitable for post-quantum signatures.
VOLEitH leverages vector oblivious linear evaluation and non-interactive zero-knowledge proofs to produce efficient signatures secure under quantum threat models. This approach also supports multivariate quadratic (MQ) problems, which form the basis of candidate post-quantum cryptographic schemes thought to be quantum-resistant.
Additionally, schemes like Unbalanced Oil and Vinegar (UOV) provide trapdoor functions for MQ maps, enabling signature schemes adaptable for MOLE credentials. These modular building blocks allow the design of a flexible yet secure credential system accommodating evolving requirements and threat models.
Who Should Care and Next Steps for Developers
Developers of web privacy and security protocols, especially those operating or integrating token-based authentication or rate-limiting systems, must be aware of these quantum threats. Organizations relying on protocols like Privacy Pass for user privacy and abuse mitigation should monitor developments in MOLE and related post-quantum primitives.
Developers should verify:
- Whether their systems currently depend on quantum-vulnerable cryptography.
- The roadmap and timelines for transitioning to post-quantum cryptographic algorithms.
- The compatibility of their authentication and token issuance mechanisms with new primitives like MOLE.
- Potential performance trade-offs due to larger key sizes and more complex operations inherent in post-quantum cryptography.
Practical Checklist
- Audit current cryptographic dependencies to identify quantum vulnerabilities.
- Stay informed on standardization efforts and emerging libraries implementing post-quantum blind signatures.
- Plan for necessary infrastructure changes to support larger signature sizes and computational overhead.
- Engage with open-source projects or vendor updates incorporating MOLE-like capabilities.
- Test new cryptographic schemes in staging environments to assess performance and usability impacts.
Editorial Checks
Details such as exact deployment timelines, comprehensive performance benchmarks of MOLE-based systems, and formal security proofs for all proposed primitives remain to be confirmed. Verification of integration pathways with existing web infrastructure and adherence to evolving standards merit human editorial review.
