Cloudflare Advances Post-Quantum Privacy with MOLE Protocol
Cloudflare is developing MOLE, a next-generation Privacy Pass protocol, to ensure user privacy remains secure against quantum computing threats.
Cloudflare is actively preparing for the post-quantum era by developing a new generation of its Privacy Pass protocol, codenamed MOLE (Moderation Of unLinkable Endorsements). This initiative aims to ensure that user privacy is maintained even after the advent of cryptographically relevant quantum computers, which threaten to break current encryption standards like RSA and elliptic curves.
Privacy Pass is a crucial protocol that allows website operators, including Cloudflare, to protect applications from abuse, such as excessive resource consumption by individual clients. Traditionally, mitigating such abuse involves trade-offs between user friction (like CAPTCHAs) and privacy (through tracking and fingerprinting). Privacy Pass was designed to circumvent this by issuing unlinkable tokens, allowing users to access sites without sacrificing their privacy or enduring excessive challenges.
With a decade of experience deploying Privacy Pass for various applications, including privacy proxies like iCloud Private Relay, Cloudflare and its collaborators are now focused on enhancing this technology. The goals for this new generation include developing more sophisticated tools for managing agentic traffic and fostering a more open ecosystem by enabling broader client participation. These advancements necessitate capabilities beyond the current Privacy Pass protocol.
The primary challenge in transitioning to post-quantum cryptography lies in the sheer size of new cryptographic primitives. For instance, ML-DSA-44 signatures are significantly larger than current ECDSA-P256 signatures, requiring systems to be re-engineered to accommodate this increased cost. While drop-in replacements are not on the immediate horizon, Cloudflare is exploring potential primitives that can uphold the same privacy guarantees as the current system.
MOLE is built upon a blind signature scheme, a core component of Privacy Pass. This scheme allows a client to obtain a signature from an issuer without revealing the message being signed. The client can later present this signature without the issuer being able to link it back to the original issuance, thus preserving client privacy. However, the current Privacy Pass tokens reveal the issuer's identity, which can be useful for certain use cases but is not always necessary.
MOLE aims to go a step further by introducing an "endorsement" mechanism. An endorsement is issued by an "anchor" and redeemed by a "moderator." Before redemption, the client and moderator agree on a set of trusted anchors. During redemption, the client proves it received an endorsement from one of these anchors without revealing which one. This "issuer-hiding" property ensures equal treatment for all clients, regardless of the issuing anchor, thereby facilitating broader participation.
Upon successful redemption of an endorsement, the moderator issues a MOLE credential. This credential is what the client will use to interact with the website, ensuring that the client's activities are moderated while maintaining privacy. The endorsement itself can take various forms, but its critical feature is the ability to be redeemed while concealing the identity of the anchor that issued it.
This development by Cloudflare signifies a proactive approach to securing web privacy in the face of emerging quantum threats. By innovating on protocols like Privacy Pass and developing new cryptographic primitives like those in MOLE, the company is working to ensure that the internet remains private and secure for users even in a post-quantum world.