# X25519MLKEM768

Published articles for X25519MLKEM768.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Thou shall not pass: Gatekeeping outbound TLS connections

DevFeed: [Thou shall not pass: Gatekeeping outbound TLS connections](<https://devfeed.tech/articles/thou-shall-not-pass-gatekeeping-outbound-tls-connections-61510.md>)

Original publisher: [Read original article](<https://blog.apnic.net/2026/09/29/thou-shall-not-pass-gatekeeping-outbound-tls-connections/>)

Author: Henrique Becker Brum

Published: 2026-09-29T00:04:51Z

Content type: article

Language: en

Sources: [APNIC Blog](<https://devfeed.tech/sources/apnic-blog.md>)

Topics: [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Post-quantum cryptography](<https://devfeed.tech/topics/post-quantum-cryptography.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>)

Tags: [guest-post](<https://devfeed.tech/tags/guest-post.md>), [measurement](<https://devfeed.tech/tags/measurement.md>), [post-quantum-cryptography](<https://devfeed.tech/tags/post-quantum-cryptography.md>), [post-quantum-cryptography-pqc](<https://devfeed.tech/tags/post-quantum-cryptography-pqc.md>), [security](<https://devfeed.tech/tags/security.md>), [tech-matters](<https://devfeed.tech/tags/tech-matters.md>), [tls](<https://devfeed.tech/tags/tls.md>), [x25519mlkem768](<https://devfeed.tech/tags/x25519mlkem768.md>)

### AI overview

The article compares more than 50 million TLS handshakes collected over two weeks at a research institution with national security guidelines. It reports widespread use of TLS options that the guidelines do not recommend and highlights seven million handshakes using the post-quantum supported group X25519MLKEM768.

### Source excerpt

Guest Post: To quantify how closely guideline recommendations align with real-world TLS deployments, we collected over 50 million TLS handshakes during two weeks from our research institution.

## Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%

DevFeed: [Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%](<https://devfeed.tech/articles/cloudflare-measures-origin-tls-preferences-cutting-handshake-retries-from-52-to-3-7-55522.md>)

Original publisher: [Read original article](<https://www.infoq.com/news/2026/09/cloudflare-automatic-key-exchang/>)

Author: Steef-Jan Wiggers

Published: 2026-09-20T08:15:00Z

Content type: news

Language: en

Sources: [InfoQ](<https://devfeed.tech/sources/infoq.md>)

Topics: [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Handshake](<https://devfeed.tech/topics/handshake.md>), [Latency](<https://devfeed.tech/topics/latency.md>), [Post-quantum cryptography](<https://devfeed.tech/topics/post-quantum-cryptography.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [architecture-design](<https://devfeed.tech/tags/architecture-design.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [cloudflare-automatic-key-exchang](<https://devfeed.tech/tags/cloudflare-automatic-key-exchang.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [handshake](<https://devfeed.tech/tags/handshake.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [latency](<https://devfeed.tech/tags/latency.md>), [network](<https://devfeed.tech/tags/network.md>), [networking](<https://devfeed.tech/tags/networking.md>), [news](<https://devfeed.tech/tags/news.md>), [performance](<https://devfeed.tech/tags/performance.md>), [post-quantum](<https://devfeed.tech/tags/post-quantum.md>), [tcp](<https://devfeed.tech/tags/tcp.md>), [tls](<https://devfeed.tech/tags/tls.md>), [x25519mlkem768](<https://devfeed.tech/tags/x25519mlkem768.md>)

### AI overview

Cloudflare replaced a static X25519 choice in origin TLS handshakes with per-origin measurement. HelloRetryRequests fell from roughly 52% to 3.7%, reducing p90 handshake latency by more than 150 milliseconds. The system also identifies origins that support post-quantum key exchange, while accounting for compatibility problems caused by larger ClientHello messages.

### Source excerpt

Cloudflare has replaced its static X25519 guess for origin TLS handshakes with per-origin measurement. HelloRetryRequests on scanned origins fell from roughly 52% to 3.7%, removing over 150 ms from p90 latency. Post-quantum connections completing in one round trip rose from 0% to 99.2%, though only 12.8% of origins support it. By Steef-Jan Wiggers

## Daiwa and Deloitte break PQC implementation into manageable steps

DevFeed: [Daiwa and Deloitte break PQC implementation into manageable steps](<https://devfeed.tech/articles/daiwa-and-deloitte-break-pqc-implementation-into-manageable-steps-50690.md>)

Original publisher: [Read original article](<https://siliconangle.com/2026/09/17/daiwa-deloitte-break-pqc-implementation-manageable-steps-digicertworldquantumreadinessday/>)

Author: Victoria Gayton

Published: 2026-09-17T19:00:46Z

Content type: news

Language: en

Sources: [SiliconANGLE](<https://devfeed.tech/sources/siliconangle.md>)

Topics: [Post-quantum cryptography](<https://devfeed.tech/topics/post-quantum-cryptography.md>), [migration](<https://devfeed.tech/topics/migration.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security, Privacy and Abuse Prevention](<https://devfeed.tech/topics/security-privacy-and-abuse-prevention.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [TLS handshake](<https://devfeed.tech/topics/tls-handshake.md>)

Tags: [colin-soutar](<https://devfeed.tech/tags/colin-soutar.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [cube-event-coverage](<https://devfeed.tech/tags/cube-event-coverage.md>), [daiwa-institute-of-research](<https://devfeed.tech/tags/daiwa-institute-of-research.md>), [deloitte-touche-tohmatsu](<https://devfeed.tech/tags/deloitte-touche-tohmatsu.md>), [digicert](<https://devfeed.tech/tags/digicert.md>), [digicert-s-world-quantum-readiness-day-2026](<https://devfeed.tech/tags/digicert-s-world-quantum-readiness-day-2026.md>), [digicertworldquantumreadinessday](<https://devfeed.tech/tags/digicertworldquantumreadinessday.md>), [fips-203](<https://devfeed.tech/tags/fips-203.md>), [migration](<https://devfeed.tech/tags/migration.md>), [module-lattice-based-key-encapsulation-mechanism](<https://devfeed.tech/tags/module-lattice-based-key-encapsulation-mechanism.md>), [news](<https://devfeed.tech/tags/news.md>), [nist](<https://devfeed.tech/tags/nist.md>), [post-quantum-cryptography](<https://devfeed.tech/tags/post-quantum-cryptography.md>), [pqc](<https://devfeed.tech/tags/pqc.md>), [pqc-implementation](<https://devfeed.tech/tags/pqc-implementation.md>), [products](<https://devfeed.tech/tags/products.md>), [public-key-infrastructure](<https://devfeed.tech/tags/public-key-infrastructure.md>), [sadaaki-yamaziki](<https://devfeed.tech/tags/sadaaki-yamaziki.md>), [security](<https://devfeed.tech/tags/security.md>), [technical](<https://devfeed.tech/tags/technical.md>), [thecube](<https://devfeed.tech/tags/thecube.md>), [tom-hellebeek](<https://devfeed.tech/tags/tom-hellebeek.md>), [transport-layer-security](<https://devfeed.tech/tags/transport-layer-security.md>), [world-quantum-readiness-day-2026](<https://devfeed.tech/tags/world-quantum-readiness-day-2026.md>), [x25519mlkem768](<https://devfeed.tech/tags/x25519mlkem768.md>)

### AI overview

Daiwa and Deloitte describe post-quantum cryptography as an enterprise migration program involving staged testing, planning for dependencies, and coordination across budgets, products, and governance. Daiwa tested a hybrid approach for an online trading system and measured the effect on TLS performance, finding a small increase in handshake time in its high-bandwidth data-center environment while noting that bandwidth-constrained environments require separate validation.

### Source excerpt

PQC implementation becomes more manageable when organizations treat it as a migration program rather than a physics problem. As the post-quantum cryptography transition moves from discussion to implementation, organizations can test what is ready while planning around unresolved dependencies. Even straightforward technical changes can take years once budgets, products and governance enter the picture. Practical [...] The post Daiwa and Deloitte break PQC implementation into manageable steps appeared first on SiliconANGLE.