Encrypted data stolen today can be decrypted years from now, once sufficiently powerful quantum computers exist. That threat, known as "Harvest Now, Decrypt Later," has pushed Cloudflare to rebuild a core piece of its data localization infrastructure. The company has entered closed beta with a Post-Quantum GeoKey Manager, a system designed to keep private decryption keys locked to specific geographic regions while resisting both classical and quantum attacks. General availability is planned for the first quarter of 2027.
Why geography and cryptography now intersect
Enterprises operating across borders face a persistent tension: data must move fast across global networks, but regulators increasingly demand it stay put. Rules such as the GDPR in Europe and various financial-sector locality mandates require that sensitive information, and often the cryptographic keys that unlock it, remain within defined jurisdictions. Cloudflare first addressed this in 2017 with geographic key isolation tools, then refined the approach in 2022 using Ciphertext-Policy Attribute-Based Encryption to support more flexible, multi-region access rules.
That attribute-based scheme worked well against today's computers, but it has no standardized post-quantum equivalent. Rather than wait for one, Cloudflare shifted to Hybrid Public Key Encryption, a design already codified in RFC 9180, pairing it with NIST-approved post-quantum math.
How the hybrid encryption model works
The new architecture combines ML-KEM-768, a lattice-based algorithm standardized by NIST under FIPS 203, with the classical elliptic-curve method X25519. Because the two run together, an attacker would need to break both the quantum-resistant and the classical component simultaneously to compromise confidentiality, a safeguard against the possibility that either algorithm is weakened in the future. Authenticated encryption and key derivation rely on AES-256-GCM and HKDF-SHA-256, standard symmetric tools that handle the bulk encryption once keys are established.
Keys are organized in a hierarchy: a 256-bit regional root key sits above individual service key pairs covering products like Gateway, Tunnel, and Access. This segmentation limits the damage any single compromised key could cause, confining exposure to one service and one regional epoch rather than the entire network.
Separating ciphertext from the keys that unlock it
The system's core safeguard is structural: encrypted data and the keys needed to decrypt it travel through entirely different paths. Wrapped ciphertext moves globally across Cloudflare's edge through its Quicksilver key-value store, but the symmetric regional root keys never pass through that same channel. Instead, they are issued only through a control-plane service backed by on-premises HashiCorp Vault clusters.
- Edge servers must authenticate with a hardware Trusted Platform Module before receiving a regional root key, with Cloudflare's Zinc inventory platform verifying the machine's physical location.
- Authorized keys live only in volatile Linux kernel keyrings in RAM, never written to disk, so a reboot or power cycle erases them automatically.
- If a server outside the authorized region requests a key it was never issued, the system fails closed, dropping the request instead of attempting any workaround.
What this means for enterprise security
For organizations handling regulated or long-lived sensitive data, the practical appeal is straightforward: data encrypted today should remain unreadable decades from now, even if quantum computing matures faster than expected. Pairing hardware attestation with fail-closed enforcement also narrows the room for configuration errors or insider misuse to cause cross-border data exposure, a recurring compliance concern for multinational firms.
The closed beta currently applies to Cloudflare One Zero Trust services, including Magic WAN, Tunnel, and Gateway, with CDN-wide integration expected before the 2027 general release. Enterprises evaluating long-term data sovereignty strategies now have a concrete, if still limited, preview of how post-quantum key management may be enforced at network scale.