ReleaseBytes
gcp Google Cloud Blog ·

Cloud KMS Introduces Quantum-Safe Key Import Preview; PQC Insights GA

blogsecuritygcpgapreviewarchitect
feature announcement

Google Cloud has launched a public preview for quantum-safe key import in Cloud Key Management Service (Cloud KMS) and made its PQC insights generally available. This allows multicloud enterprises to protect sensitive BYOK encryption keys in transit against future quantum threats, mitigating "Store Now, Decrypt Later" attacks using hybrid post-quantum cryptography. The import process integrates into the existing Cloud KMS API workflow, wrapping keys in a quantum-resistant envelope using HPKE with selectable KEMs. PQC insights provide a visual overview of asymmetric keys, helping organizations monitor and plan their long-term post-quantum cryptography migration strategy.

  • →Introducing quantum-safe key import for Cloud KMS
  • →Cloud KMS PQC insights now generally available
Features (2) ›
  • Introducing quantum-safe key import for Cloud KMS

    Cloud KMS now offers a preview for quantum-safe key import for software-based cryptographic keys, allowing enterprises to protect sensitive 'bring your own keys' (BYOK) in transit against future 'Store Now, Decrypt Later' quantum attacks. This new capability integrates into existing Cloud KMS API workflows, utilizing hybrid public key encryption (HPKE) to wrap keys in a quantum-resistant envelope.

  • Cloud KMS PQC insights now generally available

    The Cloud KMS PQC insights feature, now generally available, provides a high-level visual to monitor an organization's overall post-quantum posture. It illustrates asymmetric keys based on their algorithmic categorization, assisting in planning future modernization and supporting long-term cryptographic resilience.

Read the original announcement →

https://cloud.google.com/blog/products/identity-security/announcing-quantum-safe-key-import-in-cloud-kms/

Related releases