Loading story…
Apple has released the post-quantum cryptography components of its corecrypto library as open source, publishing implementations of the NIST-standardized ML-KEM and ML-DSA algorithms alongside mathematical proofs, documentation, and verification tooling for independent review. The company said corecrypto underpins encryption, hashing, random number generation, and digital signatures across more than 2.5 billion active devices, and that post-quantum protections introduced in 2024 are already used in iMessage, VPN services, and TLS networking, including the PQ3 messaging protocol Apple previously described as a large-scale quantum-secure design.
Apple said it validated the code through a hybrid assurance model combining conventional testing, simulation, independent review, and formal verification, using a workflow that linked portable C implementations to Cryptol and Isabelle proofs with support from Galois. According to Apple, that process uncovered a subtle early ML-DSA flaw that could rarely produce incorrect output and likely would have escaped standard testing; the issue was fixed before deployment. The release is intended to make Apple’s analysis reproducible and give outside experts a chance to scrutinize security-critical cryptographic code as organizations prepare for future quantum threats.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Apple publicly released its post-quantum cryptography implementations in corecrypto, including ML-KEM and ML-DSA code, mathematical proofs, verification tools, and documentation for independent review. Apple said the verification effort uncovered an early ML-DSA flaw that was fixed before deployment.
Apple published a technical blueprint describing its formal verification approach for corecrypto, including methods used to validate post-quantum implementations. The work described collaboration and tooling used to prove correctness properties of cryptographic code.
Apple announced PQ3, a new post-quantum cryptographic protocol for iMessage intended to improve protection against future quantum-capable adversaries. The announcement positioned PQ3 as a large-scale quantum-secure messaging advancement for Apple's messaging platform.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
6 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcehelpnetsecurity.com
Open sourcecyberscoop.com
Open sourcesecurity.apple.com
Open sourcetidbits.com
Open sourcesecurity.apple.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Post-quantum cryptography support has been added to Python through the widely used `pyca/cryptography` library, bringing NIST-standard algorithms into the ecosystem ahead of broader migration pressure. The update introduces **ML-KEM** for key establishment and **ML-DSA** for digital signatures, giving Python developers access to standardized post-quantum primitives as organizations prepare for future quantum-era risks. Trail of Bits reported shipping the capability with funding from the **Sovereign Tech Agency**, while subsequent coverage highlighted the move as a practical step toward greater crypto agility in mainstream software. The addition is intended to help developers begin testing, integrating, and planning for post-quantum transitions now, rather than waiting for an emergency replacement cycle once quantum threats become more immediate.
Aug 10, 2026
Google said **Android 17** will begin a broad migration to post-quantum cryptography as part of a plan to harden the platform against future quantum attacks on public-key systems. The company is introducing quantum-resistant protections across core trust components, including **Android Verified Boot**, **Remote Attestation**, **KeyMint**, and **Android Keystore**, with support centered on the NIST-standardized `ML-DSA` algorithm. Google said the move is intended to build a quantum-resistant chain of trust spanning device boot, identity verification, and hardware-backed security services. Google also said **Google Play** will support hybrid app signing that combines classical and post-quantum signatures, and will begin generating quantum-safe `ML-DSA` signing keys for new apps while allowing existing apps to opt in. The company is targeting completion of its broader post-quantum migration by **2029**, citing the risk of **store-now-decrypt-later** attacks and warning that organizations should begin adopting NIST-developed PQC standards before fault-tolerant quantum computers can break current encryption. Google added that future Play updates are expected to support hybrid key upgrades and prompt developers to rotate signing keys every two years.
Jun 29, 2026
Cloudflare has added post-quantum authentication to **Authenticated Origin Pulls** and **Custom Origin Trust Store**, enabling customers to use **ML-DSA** signatures for Cloudflare-to-origin TLS and build fully post-quantum-secure mutual TLS on that link. The company said the protection is effective only if organizations also remove trust in classical authentication paths to avoid downgrade attacks, and positioned the release as a key step toward its stated goal of full post-quantum security by 2029. Cloudflare also noted that post-quantum authentication for browser-facing WebPKI traffic will follow a different approach based on **Merkle Tree Certificates**. The rollout comes amid broader industry acceleration toward quantum-safe security. Cloudflare Radar has been tracking worldwide post-quantum encryption adoption, while Microsoft said the timeline for quantum risk is shifting and urged faster migration planning. Cloudflare said the new capability required changes across its Go-based control plane and **Pingora Origin** data plane, and disclosed that a **BoringSSL** upgrade triggered a June 10, 2026 incident when stricter `KeyUsage` enforcement caused compatibility problems before the issue was patched and resolved.
Jul 29, 2026