TL;DR
Let’s Encrypt is developing Merkle Tree Certificates (MTCs) to enable post-quantum secure TLS. The organization aims to deploy MTCs in staging by late 2026 and in production by 2027, marking a significant step toward quantum-resistant web security.
Let’s Encrypt has revealed plans to support Merkle Tree Certificates (MTCs), a post-quantum cryptography approach, aiming for staging deployment by late 2026 and full production by 2027.
The initiative addresses the emerging threat of quantum computers capable of breaking current cryptographic standards used in TLS. Traditional post-quantum signatures, like ML-DSA-44, are significantly larger than existing algorithms, causing practical issues such as increased handshake size and network failures. MTCs offer a different approach: batching certificates into a Merkle tree, with a single signature per batch, reducing size and improving efficiency. This method also embeds Certificate Transparency directly into the issuance process, enhancing trust and auditability. Let’s Encrypt has been involved in testing and standardization efforts through the IETF, with Chrome and Cloudflare already experimenting with MTCs in real traffic. The plan involves substantial infrastructure changes across issuance, protocols, and logging systems to support this transition.
Why It Matters
This development is crucial because it signifies a proactive move by a major web CA to prepare for a future where quantum computers could compromise current cryptographic standards. Implementing MTCs could ensure the web remains secure and trustworthy in the face of advancing quantum threats, influencing industry standards and deployment timelines for post-quantum security.
As an affiliate, we earn on qualifying purchases.
Background
The push for post-quantum cryptography has gained urgency as estimates for the advent of cryptographically relevant quantum computers (CRQCs) have accelerated. Governments and standards bodies, including the NSA and NIST, are planning or recommending migration away from vulnerable algorithms like RSA-2048 and ECDSA-P256 by 2030-2035. Major tech companies like Google and Cloudflare have committed to early migration timelines, reflecting industry concern. However, the unique size constraints of post-quantum signatures have posed challenges for web PKI deployment, prompting exploration of alternative methods like MTCs, which leverage Merkle trees for efficiency and transparency.
“We believe Merkle Tree Certificates are a strong path forward for the post-quantum Web PKI.”
— Let’s Encrypt
As an affiliate, we earn on qualifying purchases.
What Remains Unclear
It is still unclear how quickly industry-wide adoption of MTCs will occur, the full technical challenges of scaling issuance and validation, and how browsers and clients will implement support for these new certificates.
quantum-resistant web security hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What’s Next
Let’s Encrypt plans to develop a staging environment for MTCs in late 2026, with a goal for production deployment in 2027. Standardization efforts in the IETF are ongoing, and industry stakeholders are expected to monitor and adapt to these developments. Further testing and infrastructure updates will be critical to ensure smooth adoption.
cryptography hardware security modules
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What are Merkle Tree Certificates?
Merkle Tree Certificates (MTCs) batch multiple certificates into a single Merkle tree, allowing a single cryptographic signature to authenticate the entire batch, reducing size and improving efficiency for post-quantum security.
Why is this development important for web security?
It prepares the web PKI for a future where quantum computers could break current cryptographic algorithms, ensuring long-term security and trustworthiness of online communications.
When will MTCs be widely used?
Let’s Encrypt aims to support MTCs in a staging environment by late 2026, with broader deployment expected in 2027, pending standardization and infrastructure updates.
What challenges remain in implementing MTCs?
Technical challenges include managing larger issuance infrastructure, updating protocols, ensuring compatibility with browsers, and handling increased handshake sizes in real-world networks.
Source: Hacker News
