---
type: "post"
id: "bringing-post-quantum-cryptography-to-geographically-fenced-key-507697"
slug: "bringing-post-quantum-cryptography-to-geographically-fenced-key-507697"
title: "Bringing post-quantum cryptography to geographically fenced key management"
description: "Cloudflare has announced a post-quantum GeoKey Manager for geographically fenced decryption keys."
retrieval_nugget: "Cloudflare has announced a post-quantum GeoKey Manager for geographically fenced decryption keys."
published_at: "2026-10-24"
updated_at: "2026-10-24"
record_date: "2026-10-24"
date_kind: "published_at"
topics: ["security"]
entities: ["Cloudflare","GeoKey Manager"]
related_patterns: []
novelty_label: "new_fact"
what_changed: "Cloudflare introduces post-quantum GeoKey Manager, protecting geographically fenced decryption keys against harvest-now, decrypt-later attacks."
prior_refs: ["memory:6b02b6cb-1d4c-8b15-a917-90c8272ba935","memory:b5b3d684-2ae1-888f-acb7-75e41ee2dd0e"]
source_url: "https://blog.cloudflare.com/post-quantum-geo-key-manager"
source_urls: ["https://blog.cloudflare.com/post-quantum-geo-key-manager"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:bringing-post-quantum-cryptography-to-geographically-fenced-key-507697"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/bringing-post-quantum-cryptography-to-geographically-fenced-key-507697/","markdown":"https://newruntime.com/posts/bringing-post-quantum-cryptography-to-geographically-fenced-key-507697.md","json":"https://newruntime.com/posts/bringing-post-quantum-cryptography-to-geographically-fenced-key-507697.json"}
---

# Bringing post-quantum cryptography to geographically fenced key management

## Retrieval answer

Cloudflare has announced a post-quantum GeoKey Manager for geographically fenced decryption keys.

Cloudflare has announced a post-quantum GeoKey Manager for geographically fenced decryption keys. The company describes it as protection against “harvest now, decrypt later” attacks, in which encrypted material collected today could be decrypted with future quantum capabilities.

The announcement connects post-quantum cryptography with strict data-sovereignty requirements. Cloudflare says it redesigned its cryptography stack so that decryption keys can remain geographically fenced while receiving post-quantum protection. The stated focus is on keys used to decrypt protected data, rather than on a general description of post-quantum encryption for all customer traffic.

The source identifies this as a new GeoKey Manager capability and describes the intended threat model. It does not establish which regions are supported, which post-quantum algorithms are used, whether the feature is generally available, or any pricing, performance, migration, interoperability, or compliance guarantees. It also provides no independent measurement of protection effectiveness against future quantum attacks.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Security](https://newruntime.com/topics/security.md): Explore the security topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)