Source
Announcing quantum-safe key import in Cloud KMS
Google has introduced a preview of quantum-safe key import in Cloud KMS for software-based cryptographic keys. This feature enables the secure transfer of encryption keys using post-quantum cryptography.
Why it matters
It protects against "store now, decrypt later" attacks, where adversaries save encrypted data today to decrypt it once viable quantum computers exist. This allows organizations to secure sensitive cloud workloads before these threats emerge.
The details
- Uses hybrid public key encryption (HPKE) to create a quantum-resistant transit envelope.
- Supports KEM options including X-Wing, ML-KEM-768, and ML-KEM-1024.
- Cloud KMS PQC insights is now generally available for monitoring asymmetric keys.
Show entities and relationshipsHide entities and relationships
In this article
Technologies
Topics
Products
Key connections
Cloud KMS is built with Hybrid Public Key Encryption
Cloud KMS uses hybrid public key encryption for its quantum-resistant transit envelope.
Cloud KMS uses Key Encapsulation Mechanism
Cloud KMS generates a post-quantum KEM private key and exposes public key to clients.
Cloud KMS uses Bring Your Own Key
Cloud KMS provides quantum-safe BYOK capabilities for importing encryption keys.
Cloud KMS supports X-Wing for the KEM layer in quantum-safe key import.
Clients can use Tink as a supported cryptographic library for client-side wrapping.
Clients can use OpenSSL as a supported cryptographic library for client-side wrapping.
Show 4 more connectionsShow fewer connections
Both are supported cryptographic libraries for executing client-side HPKE operations.
Tink uses Hybrid Public Key Encryption
Tink executes HPKE Seal operations to encapsulate public keys and encrypt key material.
OpenSSL uses Hybrid Public Key Encryption
OpenSSL executes HPKE Seal operations to encapsulate public keys and encrypt key material.
Google Cloud owns Cloud KMS
Google Cloud provides and operates the Cloud KMS service.
Related events
Preview of Quantum-Safe Key Import and General Availability of PQC Insights in Cloud KMS
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.