Cloudflare has begun closed beta testing of a system designed to keep private encryption keys locked within specific national or regional borders, even against the future threat of quantum computers breaking today's cryptography. The tool, called PQ GeoKey Manager, forms part of the company's Data Localization Suite and is expected to reach general availability across its network in the first quarter of 2027.
The launch addresses a problem that has quietly worried security architects for years: encrypted data captured today could be stored and decrypted later, once sufficiently powerful quantum machines exist. This strategy, known as "Harvest Now, Decrypt Later," turns current traffic into a future liability. By building quantum-resistant protections into key management now, Cloudflare is attempting to close that window before it becomes commercially exploitable.
Why Geography Still Matters in a Borderless Network
Cloudflare's business is built on an anycast network that routes traffic through whichever data center is closest to the user, a design that normally makes the question "where is my data physically processed" difficult to answer precisely. For most customers that is a feature, not a problem. But for banks, health systems, and government contractors operating under regulations such as the GDPR or national financial-locality rules, the inability to guarantee that a private key never leaves a jurisdiction has long been a genuine compliance obstacle.
Cloudflare first tackled this in 2017 with early geographic key isolation tools, then rebuilt the system in 2022 using Ciphertext-Policy Attribute-Based Encryption to allow more flexible, multi-region access rules. That approach worked well cryptographically, but it depended on classical mathematical assumptions that quantum computers are expected to undermine. Because no standardized, production-ready post-quantum version of attribute-based encryption currently exists, Cloudflare chose a different path: Hybrid Public Key Encryption, as defined in RFC 9180, combining a lattice-based algorithm with a traditional elliptic-curve method.
How the Hybrid Encryption Model Works
The new architecture pairs ML-KEM-768, a key encapsulation mechanism standardized by NIST under FIPS 203, with X25519, a well-established elliptic-curve algorithm already trusted across the internet. Running both in tandem means that an attacker would need to break both the quantum-resistant lattice problem and the classical elliptic-curve problem simultaneously to compromise a session. If one method is ever found to be flawed, or eventually falls to a quantum computer, the other continues to provide protection.
Symmetric encryption and key derivation rely on AES-256-GCM and HKDF-SHA-256, both long-standing, well-vetted standards. Above these sits a key hierarchy rooted in a 256-bit regional root key, from which individual service key pairs are derived for products such as Gateway, Tunnel, and Access. This segmentation limits the damage any single compromised key could cause, confining it to one service and one regional "epoch" rather than exposing the wider system.
Keeping Keys Out of the Wrong Hands - and Off Disk
The system's most distinctive feature may be its enforcement mechanism rather than its mathematics. Encrypted ciphertext is distributed globally through Cloudflare's Quicksilver key-value store, as usual. But the symmetric regional root keys needed to actually unwrap that data never travel the same path. They are issued only through a separate control-plane service backed by on-premises HashiCorp Vault clusters, and only after the requesting edge server proves its physical identity and location using a hardware Trusted Platform Module, verified against Cloudflare's internal inventory system, Zinc.
Once authorized, root keys are held exclusively in volatile Linux kernel keyrings, meaning they exist only in RAM and are erased automatically whenever a server reboots or loses power. If a server in an unauthorized location ever receives a request requiring a key it was never issued, the system is designed to fail closed, dropping the request outright rather than attempting any cross-border workaround.
What Comes Next
The closed beta is currently limited to enterprise customers using Cloudflare One Zero Trust products, including Magic WAN, Tunnel, and Gateway. Integration with Cloudflare's global content delivery network is planned ahead of the broader 2027 rollout. For organizations bound by strict data residency law, the project signals that post-quantum readiness and regulatory compliance are converging into a single engineering problem, one that infrastructure providers will increasingly be expected to solve before quantum decryption becomes a practical reality rather than a theoretical one.