Google Plans Merkle Tree Certificates for Quantum-Resistant HTTPS in Chrome
Summary
Google is testing Merkle Tree Certificates with Cloudflare as an alternative to bulky post-quantum X.509 chains, with plans for a Chrome Quantum-resistant Root Store by Q3 2027.
Key points
- Google says it has no immediate plan to add traditional post-quantum X.509 certificates to the Chrome Root Store.
- With Merkle Tree Certificates, a certificate authority signs a Tree Head, while browsers receive a lightweight proof that an individual certificate is included.
- Google says this approach could support post-quantum algorithms while limiting TLS handshake bandwidth.
- Google and Cloudflare are conducting a feasibility study using real internet traffic to evaluate MTC performance and security.
- Google plans to involve eligible Certificate Transparency log operators in Q1 2027 and establish the Chrome Quantum-resistant Root Store by Q3 2027.
Article Details
- Event Type
- Google announced plans to develop and phase in Merkle Tree Certificates (MTCs) in Chrome for quantum-resistant HTTPS.
- Impact
- MTCs are intended to support post-quantum cryptography while limiting TLS handshake data through lightweight proofs of certificate inclusion. Google says it is testing the approach with Cloudflare and plans to establish a Chrome Quantum-resistant Root Store by Q3 2027; the article reports no current security incident or confirmed deployment outcome.
Vendors
CloudflareThe company is collaborating with Cloudflare and the PLANTS working group to test MTCs and will roll out a phased program culminating in a Chrome Quantum-resistant Root Store (CQRS) by Q3 2027.GoogleGoogle will adopt Merkle Tree Certificates (MTCs) in Chrome to make HTTPS certificates resilient against future quantum attacks while avoiding bulky post-quantum X.509 chains.