A Post-Quantum Future for Let’s Encrypt

TL;DR

Prime Big Deal Days · Oct 6–7Offer from Amazon

Get the latest gadgets delivered free — and shop member deals

• Fast, free delivery on millions of items
• Access to Prime Big Deal Days deals on October 6–7
• Prime Video, Amazon Music and more included

Start your free Prime trial →Free trial for eligible customers · Cancel anytime

As an affiliate, we earn on qualifying purchases.Hide

Let’s Encrypt is developing Merkle Tree Certificates (MTCs) to enable post-quantum secure web encryption. The organization aims to stage MTCs by late 2026 and deploy broadly by 2027, addressing future quantum threats while maintaining web performance.

Let’s Encrypt has announced its plan to support Merkle Tree Certificates (MTCs), a post-quantum cryptography solution, with the goal of staging in late 2026 and full deployment by 2027. This move aims to prepare the Web PKI for the advent of quantum computers capable of breaking current cryptographic standards, ensuring long-term security for the web’s trust infrastructure.

The organization explained that MTCs involve issuing certificates in batches with a single cryptographic signature covering all certificates, reducing the size of TLS handshakes and maintaining performance. Unlike traditional individual signatures, MTCs embed transparency and auditability directly into the issuance process, leveraging existing Certificate Transparency infrastructure. This approach is designed to mitigate the size and speed issues associated with post-quantum signatures, which are significantly larger than current algorithms. Cloudflare and Chrome are already conducting feasibility tests with MTCs, and the IETF’s PLANTS working group is working on standardizing the design. Implementing MTCs at scale will require substantial changes to Let’s Encrypt’s infrastructure, including updates to issuance protocols, revocation systems, and transparency logs.

Why It Matters

This development is significant because it signals proactive steps by a major Certificate Authority to address the impending threat of quantum computing to web security. The transition to post-quantum cryptography is critical for maintaining trust in online communications, especially for long-lived keys and sensitive data. By adopting MTCs, Let’s Encrypt aims to balance security, transparency, and web performance, influencing broader industry standards and practices for post-quantum readiness.

Background

Over recent years, the urgency of post-quantum cryptography has increased, driven by government agencies and industry leaders recognizing the threat posed by future quantum computers. Major players like Google and Cloudflare have committed to migrating their services by 2029, and standards bodies like NIST are actively developing post-quantum algorithms. Traditional cryptographic signatures used in the Web PKI are too large for seamless deployment at scale, prompting exploration of alternative approaches like MTCs. Let’s Encrypt has operated Certificate Transparency logs since 2019, providing a foundation for integrating MTCs into its infrastructure. The initiative aligns with broader timelines set by governments and industry for transitioning to quantum-resistant security.

“Our support for Merkle Tree Certificates is a critical step toward securing the web against future quantum threats, balancing performance and transparency.”

— Let’s Encrypt spokesperson

“Implementing MTCs at scale will be challenging but essential to maintain web security without sacrificing user experience.”

— Cloudflare researcher

What Remains Unclear

It remains unclear how quickly MTC adoption will scale across the entire web ecosystem, and how browsers and other CAs will implement support. The detailed technical standards are still under development, and operational challenges in deployment at scale are yet to be fully addressed.

What’s Next

Let’s Encrypt plans to release a staging environment for MTCs in late 2026, followed by broader deployment in 2027. Industry stakeholders, including browser vendors and standards bodies, will continue refining protocols and testing interoperability. Further updates on technical standards and operational practices are expected over the next year.

Key Questions

What are Merkle Tree Certificates?

Merkle Tree Certificates are a batch-based cryptographic approach that issues multiple certificates together, with a single signature covering all, improving scalability and transparency for post-quantum security.

Why is this transition important?

Quantum computers threaten current cryptographic standards, risking the security of long-term keys and sensitive data. Transitioning to post-quantum solutions like MTCs helps safeguard the web’s trust infrastructure.

When will MTCs be widely available?

Let’s Encrypt aims to have a staging environment ready by late 2026, with full deployment targeted for 2027, subject to standardization and testing progress.

Will this affect website performance?

MTCs are designed to reduce handshake size compared to naive post-quantum signatures, but large-scale deployment will require infrastructure updates to maintain performance.

Source: Hacker News