US cybersecurity firm Cloudflare researches MOLE post-quantum anonymous credential mechanism for AI agent traffic management
Cloudflare is researching MOLE, a post-quantum secure anonymous credential system using multivariate cryptography, aiming to counter quantum threats and manage AI agent traffic.
US-based cybersecurity and cloud computing company Cloudflare recently disclosed that it is researching a new post-quantum secure anonymous credential mechanism called MOLE (Moderation Of unLinkable Endorsements). The research aims to address the threat of future quantum computers with cryptographic attack capabilities potentially breaking traditional encryption technologies, which could allow attackers to forge tokens and bypass security controls such as rate limiting.
The existing Privacy Pass technology allows users to prove they have passed verification while protecting their privacy, but websites can still identify the source of the token issuance. Cloudflare's MOLE attempts to further hide the user's endorsement source: the verification service can confirm that the endorsement comes from a trusted institution without identifying exactly which party provided the endorsement, subsequently issuing a credential for the user to access the website.
Technically, Cloudflare is researching the combination of multivariate cryptography and VOLE-in-the-Head (VOLEitH) zero-knowledge proof technologies to build an anti-quantum anonymous credential system suitable for MOLE. Beyond basic security protection, Cloudflare has also listed AI agent traffic management as a key future application direction for MOLE, hoping to use it to reduce the situation where massive automated AI requests occupy website resources and affect the experience of ordinary users.
However, the technology is currently in the research and development stage. Preliminary tests show that although some solutions can complete a single operation within milliseconds, post-quantum cryptographic technologies generate larger signature and verification data, with some operations requiring the transmission of several KB of data. If applied to actual web services in the future, besides verification speed, the communication burden caused by frequent verification will need to be carefully considered.