{"schema":"hottub-news/story/v1","story":"st_aqy6ablifk625taioisq","title":"Cloudflare shields IPsec from quantum downgrade attacks","title_en":null,"outlets":2,"brief":null,"page":"https://hottub.news/stories/preventing-quantum-downgrade-attacks-against-ipsec-aqy6ablifk","count":2,"items":[{"id":"n_zd6pu32ntxftfdbqpmcq","seq":864893,"kind":"article","title":"Cloudflare shields IPsec from quantum downgrade attacks","url":"https://quantumzeitgeist.com/quantum-downgrade-attacks-cloudflare-shields","summary":"Cloudflare is helping to develop stronger protections against quantum downgrade attacks, a mitigation against attacks on IPsec, which has been implemented and is available in beta across their IPsec products. These attacks trick endpoints into using weaker crypto, eliminating the protection provided by post-quantum cryptography and allowing victims to be downgraded to classical cryptography.","published":"2026-09-29T18:57:13Z","seen":"2026-09-30T09:11:16Z","lang":"en","source":{"id":"kite-quantumzeitgeist-com-d5324f","name":"quantumzeitgeist.com","domain":"quantumzeitgeist.com"},"via":"kite-quantumzeitgeist-com-d5324f","topics":["quantum-physics","quantum cryptography","quantum networking","cloudflare","cryptography","ietf","ikev2","ipsec"],"authors":["Rusty Flint"],"entities":[{"id":"Q4778915","name":"Cloudflare","type":"org"}],"image":"https://quantumzeitgeist.com/wp-content/uploads/cloudflare-shields-ipsec-quantum-downgrade-attacks.jpg","story":"st_aqy6ablifk625taioisq","category":"science-technology","category_p":0.8500000238418579,"sentiment":"neutral","tone":-0.10000000149011612,"political":0.38999998569488525},{"id":"n_aqy6ablifk625taioisq","seq":675060,"kind":"article","title":"Preventing quantum downgrade attacks against IPsec","url":"https://blog.cloudflare.com/ipsec-downgrade-protection","summary":"A sophisticated attacker with a quantum computer can exploit a protocol design flaw to downgrade post-quantum IPsec tunnels to classical crypto. We helped the IETF develop a transcript authentication extension to prevent these attacks.","published":"2026-09-29T13:00:00Z","seen":"2026-09-29T13:05:57Z","lang":"en","source":{"id":"kite-blog-cloudflare-com-541568","name":"blog.cloudflare.com","domain":"blog.cloudflare.com","outlet":{"wikidata":"Q113653785","name":"The Cloudflare Blog","type":"website","designations":["blog"]}},"via":"kite-blog-cloudflare-com-541568","topics":["cloud-computing","attacks","cryptography","ipsec","networking","post-quantum","standards"],"authors":["Christopher Patton","Amos Paul","Lina Baquero"],"image":"https://blog.cloudflare.com/_emdash/api/media/file/01M3PBXV6RMBDAPYBPS4CSKCS9.01M3PBXVX4E5746D4FX9F3R8V5.png","story":"st_aqy6ablifk625taioisq","category":"science-technology","category_p":0.7699999809265137,"sentiment":"neutral","tone":-0.38999998569488525,"political":0.5199999809265137}]}