Google Cloud has unveiled its comprehensive strategy for transitioning its infrastructure to post-quantum cryptography (PQC), aiming for complete readiness by 2029. This initiative comes in response to rapid advancements in quantum technology, prompting the tech leader to accelerate its timeline.
Quantum Threat Model and Key Focus Areas
Earlier this year, Google adjusted its schedule for adopting PQC technologies, setting a target completion year of 2029. The plan, outlined through Google’s Quantum Threat Model, emphasizes three main priorities: addressing Store Now Decrypt Later (SNDL) risks, enhancing digital signature security against forgery, and ensuring cryptographic adaptability for emerging standards.
Google Cloud has already made significant strides. Their API endpoints, including google.com and googleapis.com, have integrated the NIST-standardized ML-KEM key exchange in a hybrid mode. Additionally, both application and proxy load balancers now support quantum-safe hybrid key exchange for TLS 1.3 on an opt-in basis, enabling users to verify these changes within their systems.
Milestones and Future Targets
The roadmap outlines a series of milestones, including mitigating SNDL risks by the end of 2027. This effort encompasses customer-facing workloads and essential tools such as Cloud VPN and Interconnect, alongside data transfer services like BigQuery CLI and Storage Transfer Service.
Efforts to secure signature integrity and identity protections are projected to conclude by the end of 2028. This includes deploying quantum-resistant software supply chain attestations and rolling out quantum-safe certificates throughout Google’s infrastructure.
Progress in Quantum-Safe Technologies
Google Cloud’s key management initiatives are on track to meet a 2028 deadline, although certain elements may advance sooner. For instance, Cloud KMS is expected to support quantum-safe key import by 2026, while developments in confidential computing and Cloud HSM are slated for 2028.
In hardware, Google is investing in open-source silicon components, such as Caliptra and OpenTitan, the latter already supporting quantum-secure boot mechanisms. These efforts aim to align with broader industry guidelines and evolving global standards, including CNSA 2.0 and NIST IR 8547.
Customer Recommendations and Industry Outlook
Google emphasizes the shared responsibility for infrastructure security, urging customers to manage their software updates, encryption keys, and service configurations to ensure quantum-safe settings. They recommend starting with an inventory of cryptographic assets, updating tooling for PQC libraries, and testing applications against available quantum-safe APIs.
Looking ahead, Google anticipates ongoing collaboration into the 2030s to support industry-wide transitions and the deprecation of legacy algorithms vulnerable to quantum attacks.
