TL;DR
Google Cloud publishes detailed PQC roadmap targeting full quantum-safe migration by 2029, with ML-KEM and ML-DSA now generally available in Cloud KMS.
Key Points
- ML-KEM (FIPS 203) hybrid key exchange now live on google.com and *.googleapis.com API endpoints
- Load balancers support X25519MLKEM768 for TLS 1.3; Cloud KMS PQC algorithms (ML-KEM, ML-DSA, SLH-DSA) generally available
- Three-domain strategy: Store Now Decrypt Later (SNDL) mitigation by 2027, integrity/signatures by 2028, cryptographic agility by 2028
- Merkle Tree Certificates experiments underway with Chrome and Cloudflare to address PQC signature size challenges in WebPKI
Why It Matters
This is a concrete, large-scale deployment of post-quantum cryptography that directly impacts developers building on Google Cloud. The SNDL threat—harvesting encrypted data now for decryption by future quantum computers—is real, and Google's 2029 deadline aligns with NIST standards (CNSA 2.0, NIST IR 8547). Developers can start validating PQC implementations today via opt-in load balancer support and Cloud KMS, preparing for mandatory transitions.
Source: cloud.google.com