pragma.vision Technology observatory & strategic foresight

Verification registerSecurity & Identity

Living definition

What is Workers Native ML-KEM and ML-DSA WebCrypto?

Post-Quantum CryptographySecurity & Identity

Kind
Product or service
Released
2026-10-22
Cohort
product_service-002

Description

What it is and what it is for

AI-assisted draft · independently checked

Much of today's online security relies on public-key cryptography, which lets two parties agree on a secret key over an open channel. A powerful enough quantum computer could solve the maths behind many current methods, so the field of post-quantum cryptography designs replacements believed to resist such attacks; experimenting with these in a JavaScript environment has been hard without built-in support. This technology adds two such algorithms to the Web Crypto programming interface of Cloudflare Workers, a serverless platform for running apps: ML-KEM, which establishes shared secrets, and ML-DSA, which signs and verifies data. Cloudflare describes it as an opt-in way to experiment without bundling a separate cryptographic implementation. NIST published the ML-KEM standard, FIPS 203, on August 13, 2024.

Written from primary sources and reference pages, and checked against them by an independent AI fact-checker. Drafted with AI assistance.

Primary sources

Where this description comes from

  1. Support for modern cryptographic algorithms in WorkersCloudflareVendor
  2. Web Crypto adds ML-KEM and ML-DSA supportCloudflareVendor
  3. Cloudflare Workers documentationCloudflareVendor
  4. FIPS 203 Module-Lattice-Based Key-Encapsulation Mechanism StandardNISTGovernment

A plain-language summary that simplifies technical detail; it does not assess readiness, maturity or adoption.

Release record

Published description

Published on

Cohort
product_service-002
Root
sha256:3be15a7f818b7fdc7cf65e3d9c02420256298ea5a78ecfc4aeb6ef0128b6b9cf
Entry
sha256:ac83f91fde3d2e68d3489404063c0450fd9b0f1d71bc318cf16df6fc3576cbec

Your opinion

Tell us anything.

What works, what doesn't, what's missing — especially about our watches, lenses, and the register itself. Anonymous is fine; leave an email if you'd like a reply.