Chrome Deploys Quantum-Resistant Encryption in Latest Update

Google Chrome has quietly rolled out quantum-resistant encryption for its users since version 131 on Windows, macOS, Linux, ChromeOS, and Android. The security update introduces the standardized ML-KEM key-exchange system, which provides protection against potential future quantum computer attacks.

The key exchange change is primarily about how the browser and a compatible server create the secret used for a TLS 1.3 session. This doesn't directly impact the encryption of page data itself, as that can still be handled by established symmetric ciphers like AES-GCM, which are considered resistant to known quantum attacks.

Instead, Chrome's deployment focuses on protecting against 'store now, decrypt later' scenarios, where an adversary records encrypted traffic today and waits until a capable quantum computer exists. The new hybrid handshake combines the well-studied classical exchange with a lattice-based mechanism intended to resist quantum cryptanalysis.

The design retains the existing X25519 exchange while adding ML-KEM-768, derived from NIST's finalized FIPS 203 in August 2024. Chrome had already deployed this approach at scale before the IETF published RFC 10024, defining hybrid post-quantum key agreement for TLS 1.3 in August 2026.