Announcing MCP Toolbox Java SDK v1.0: Agentic data access for the enterprise
cloud.google.com·6d ago
Cloud & Infrastructure
Google Cloud Blog·Aug 20·5 min read
Announcing quantum-safe key import in Cloud KMS
TL;DR
Google Cloud has introduced quantum-safe key import in Cloud Key Management Service (Cloud KMS), enhancing security for software-based cryptographic keys against future quantum threats. This feature is part of a broader initiative to prepare for the era of quantum computing.
✦ Why It Matters
Start using quantum-safe key import today to secure your encryption keys against future quantum threats.
Key Takeaways
- Implement quantum-safe key import to secure key transit.
- Utilize hybrid public key encryption for enhanced security.
- Monitor your post-quantum posture with Cloud KMS insights.
- Choose from multiple KEM options for key wrapping.
How It Works
The quantum-safe key import process begins with the client initiating an import job via the Cloud KMS API. The server generates a post-quantum KEM private key and shares the public key with the client.
The client then uses a cryptographic library to wrap the key material in a quantum-resistant envelope using HPKE. Finally, the encapsulated ciphertext is sent back to the Cloud KMS server, which safely unwraps the key material using its private key.