Bas Westerbaan
Research Engineer
Bas works to drive the adoption of post-quantum cryptography at Cloudflare and the Internet at large. His works range from cryptography engineering, standardisation, to large-scale experimentation, and subsequent deployment. In a previous life, Bas studied the mathematical foundations of quantum theory.
Research Areas
Post-Quantum Cryptography, Quantum Computing, Cryptography Engineering
Projects
Publications
2025RFC 9814: Use of the SLH-DSA Signature Algorithm in the Cryptographic Message Syntax (CMS)
Internet Research Task Force (IRTF). 2025.
Russ Housley,
Scott Fluhrer,
Panos Kampanakis,
Bas Westerbaan
2024X-Wing: The Hybrid KEM You've Been Looking For
IACR Communications in Cryptology (Volume: 1, Issue: 1, March 2024).
Manuel Barbosa,
Deirdre Connolly,
João Diogo Duarte,
Aaron Kaiser,
Peter Schwabe,
Karolin Varner,
Bas Westerbaan
2024Private SCT Auditing, Revisted
Transparency.dev Summit. October 9-11, 2024.
Lena Heimberger,
Christopher Patton,
Bas Westerbaan
2023Post-Quantum Privacy Pass via Post-Quantum Anonymous Credentials
Real World Crypto Symposium 2023. Tokyo, Japan. March 2023.
Vamsi Policharla,
Bas Westerbaan,
Armando Faz-Hernandez,
Christopher A. Wood
2021Implementing and measuring KEMTLS
Progress in Cryptology – LATINCRYPT 2021, Lecture Notes in Computer Science(), vol 12912. Springer, 2021.
Sofía Celi,
Armando Faz-Hernandez,
Nick Sullivan,
Goutam Tamvada,
Luke Valenta,
Thom Wiggers,
Bas Westerbaan,
Christopher A. Wood
Blog posts
- State of the post-quantum Internet in 2025
- Keeping the Internet fast and secure: introducing Merkle Tree Certificates
- Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1
- Conventional cryptography is under threat. Upgrade to post-quantum cryptography with Cloudflare Zero Trust
- A look at the latest post-quantum signature standardization candidates
- NIST’s first post-quantum standards
- The state of the post-quantum Internet
- Post-quantum cryptography goes GA
- Cloudflare now uses post-quantum cryptography to talk to your origin server
- Post-quantum crypto should be free, so we’re including it for free, forever
- No, AI did not break post-quantum cryptography
- Defending against future threats: Cloudflare goes post-quantum
- Introducing post-quantum Cloudflare Tunnel
- Experiment with post-quantum cryptography today
- NIST’s pleasant post-quantum surprise
- Sizing Up Post-Quantum Signatures