Loading story…
Google Cloud published a post-quantum cryptography migration roadmap that maps service-level milestones to Google’s broader commitment to complete its PQC transition by 2029. The plan prioritizes protections against store-now-decrypt-later risks by the end of 2027, followed by digital signatures, attestations, foundational services, and key management by the end of 2028, while acknowledging that some hardware-rooted components may remain on longer replacement cycles beyond 2029.
Google said several milestones are already complete, including quantum-confidential ALTS in 2025, PQC support for Google Cloud API endpoints and load balancers in 2026, and general availability in Cloud KMS for ML-KEM, ML-DSA, and SLH-DSA. The roadmap also notes dependencies on evolving standards for certificate and signature work, including Merkle Tree Certificates, and makes clear that customers will need to update client software, manage key lifecycles, and enable quantum-safe configurations to complete parts of the migration.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
Google Cloud published a post-quantum cryptography migration roadmap on August 11, 2026. The roadmap assigns milestones across store-now-decrypt-later protections, integrity and non-repudiation, and foundations and key management, aligned to Google's 2029 migration commitment.
The core Merkle Tree Certificate specification reached working-group draft revision 05 on July 6, 2026. Google cites the draft's still-evolving status as a dependency affecting certificate and signature rollout timing.
Google announced a company-wide target to complete its post-quantum cryptography migration by 2029. This target is referenced as the broader commitment that the later Google Cloud roadmap aligns to.
Chrome and Cloudflare have been testing the Merkle Tree Certificate design against live traffic since February 2026. The testing is cited as part of ongoing work around certificate-related post-quantum standards.
Google lists post-quantum support for Google Cloud API endpoints and for application and proxy load balancers as completed in 2026. The roadmap notes API endpoints use ML-KEM in hybrid mode and load balancers use X25519MLKEM768 hybrid key exchange for TLS 1.3.
Google lists quantum-confidential ALTS as a completed post-quantum cryptography milestone in its roadmap. The completion is anchored only to the year 2025.
Google Cloud said Cloud KMS has reached general availability for the post-quantum algorithms ML-KEM, ML-DSA, and SLH-DSA. The roadmap article cites this as an already shipped quantum-safe capability alongside hybrid key exchange support in other Google Cloud services.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourceinfosecurity-magazine.com
Open sourcepostquantum.com
Open sourcecloud.google.com
Open sourcedatatracker.ietf.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google said **Android 17** will begin a broad migration to post-quantum cryptography as part of a plan to harden the platform against future quantum attacks on public-key systems. The company is introducing quantum-resistant protections across core trust components, including **Android Verified Boot**, **Remote Attestation**, **KeyMint**, and **Android Keystore**, with support centered on the NIST-standardized `ML-DSA` algorithm. Google said the move is intended to build a quantum-resistant chain of trust spanning device boot, identity verification, and hardware-backed security services. Google also said **Google Play** will support hybrid app signing that combines classical and post-quantum signatures, and will begin generating quantum-safe `ML-DSA` signing keys for new apps while allowing existing apps to opt in. The company is targeting completion of its broader post-quantum migration by **2029**, citing the risk of **store-now-decrypt-later** attacks and warning that organizations should begin adopting NIST-developed PQC standards before fault-tolerant quantum computers can break current encryption. Google added that future Play updates are expected to support hybrid key upgrades and prompt developers to rotate signing keys every two years.
Jun 29, 2026
The U.S. government is accelerating post-quantum cryptography adoption across federal systems and the defense industrial base, with new executive and Defense Department directives setting milestones for agencies and contractors to support PQC by 2030 and use it by 2031. Reporting on the Pentagon’s strategy says the Cybersecurity Maturity Model Certification program will be updated with quantum-resistant requirements, while broader federal policy frames a two-track quantum strategy that combines defensive migration with continued national quantum advancement. Officials and industry sources warn that many contractors remain unprepared, even as governments and security agencies increasingly cite **Harvest Now, Decrypt Later** as a current risk to long-lived sensitive data. At the same time, industry is arguing that organizations cannot delay deployment waiting for better algorithms, even as implementation flaws raise fresh concerns around today’s standards. Cloudflare said `ML-DSA`, standardized alongside `ML-KEM`, is imperfect but the most practical near-term signature option and remains central to its plan for full post-quantum security by 2029. Separate research coverage highlighted practical key-recovery attacks against buggy `ML-DSA` implementations, including failures involving nonce reuse and corrupted signing randomness, underscoring that migration urgency must be matched by rigorous engineering, testing, and protections against side-channel and randomness-leakage failures.
Jul 14, 2026
Security experts are intensifying efforts to develop and implement post-quantum cryptography (PQC) in anticipation of the eventual arrival of quantum computers capable of breaking current encryption algorithms, a milestone referred to as "Q-Day." The transition to PQC is recognized as a complex, multi-year process that requires not only new cryptographic algorithms but also significant changes to cybersecurity infrastructure, including the adoption of hybrid solutions and the integration of PQC into zero-trust architectures. High-security sectors are particularly urged to begin migration early to mitigate the risk of "harvest now, decrypt later" attacks, where adversaries collect encrypted data now to decrypt once quantum capabilities are available. Industry analysts highlight that the migration to post-quantum encryption presents unique challenges compared to previous cryptographic upgrades, as it involves extensive updates to hardware, software, and system architectures. While some areas, such as blockchain, are not immediately threatened by quantum computing, the scale and complexity of the migration require coordinated efforts across security, product management, and IT operations. Experts emphasize the need for proactive planning and the adoption of best practices to ensure a smooth transition before quantum computers become a practical threat to digital security.
Jul 12, 2026