Sovereign Tech Fund invests in Let’s Encrypt’s quantum-resistant infrastructure

Introduction

The Sovereign Tech Fund has announced a strategic investment in Let’s Encrypt to accelerate the Certificate Authority’s transition to post‑quantum cryptography (PQC). The funding will support the development of new Merkle Tree Certificate (MTC) technology and the overhaul of Let’s Encrypt’s core software, Boulder, to handle the larger signatures required by quantum‑resistant algorithms. With Let’s Encrypt already issuing roughly ten million certificates daily and securing more than 60 % of the web, this move is a critical step toward safeguarding global internet traffic against future quantum attacks.

Why Post‑Quantum Matters for the Web

Current TLS certificates rely on RSA or elliptic‑curve signatures that are vulnerable to large‑scale quantum computers. Even the most efficient NIST‑standardized PQC schemes produce signatures that are dozens of times larger than today’s keys. If browsers simply swapped in these bulkier signatures, HTTPS connections would become slower and could break on constrained devices. Merkle Tree Certificates address this problem by collapsing many signatures into a single, short proof anchored by a Merkle tree structure. The result is a quantum‑resistant certificate that can be transmitted with comparable bandwidth to today’s standards.

The Investment’s Focus Areas

1. Enhancing Boulder and Supporting Services

The grant will fund a deep redesign of Boulder, Let’s Encrypt’s open‑source Go‑based automation engine. Improvements include:

• Integration of PQC key generation and signing workflows.
• Support for the new MTC format, including issuance, renewal, and revocation pipelines.
• Expanded testing infrastructure in the staging environment to validate performance at scale.

2. Building a Merkle Tree Certificate Authority

Beyond software, the fund will enable Let’s Encrypt to create a dedicated MTC Authority, a publisher service, and a mirror service. These components will be deployed across multiple data centers with automatic failover, ensuring high availability throughout the transition period.

3. Standards Collaboration and Compliance

The investment earmarks resources for active participation in IETF working groups, coordination with browser vendors, and alignment with the Chrome Quantum‑Resistant Root Program and TLS Baseline Requirements. Design documents and reference implementations will be produced to accelerate industry adoption.

4. Secure Key Generation and Documentation

A key ceremony using new hardware security modules will generate post‑quantum signing keys under audit. Comprehensive documentation will be prepared for ACME client developers and web‑server operators, smoothing the path to general availability.

Timeline to General Availability

The roadmap targets a staged rollout:

• 2024‑2025: Prototype MTC issuance in Let’s Encrypt’s staging environment, extensive interoperability testing.
• 2026: Pilot deployment with select browsers and large‑scale web services, performance tuning and security audits.
• 2027: General availability of Merkle Tree Certificates for all Let’s Encrypt subscribers, marking a major milestone in the quantum‑resistant web.

Practical Implications for Stakeholders

• Website owners will eventually need to update ACME clients to request MTCs, but the transition is designed to be seamless, with minimal impact on certificate renewal workflows.
• Browser vendors will gain a standardized, low‑overhead quantum‑safe certificate format to integrate, reducing the risk of fragmented implementations.
• Security professionals can begin planning for post‑quantum key management, leveraging the forthcoming documentation and key‑ceremony best practices.

Conclusion

The Sovereign Tech Fund’s backing of Let’s Encrypt represents a decisive push toward a quantum‑ready internet. By funding the development of Merkle Tree Certificates and the necessary infrastructure upgrades, the partnership aims to preserve the speed, reliability, and security of HTTPS even as quantum computers become a realistic threat. With a target launch in 2027, the initiative sets a clear timeline for the broader ecosystem to follow, ensuring that the web remains trustworthy in the quantum era.