From the blogpost:
“[…] We’ve based our PQC migration strategy on the Google Quantum Threat Model, prioritizing protection across three key domains:

  • Mitigating Store Now, Decrypt Later (SNDL) risks: Protecting today’s encrypted data from being harvested and decrypted by a future quantum computer.
  • Ensuring integrity against forgery: Strengthening digital signatures to prevent attackers from falsifying data and identity.
  • Enhancing foundational capabilities for cryptographic agility: Building flexible systems that can easily adopt new cryptographic standards with minimal engineering effort as cryptographic standards evolve.

The roadmap to 2029

We’ve established specific customer-centered journeys for Google Cloud to achieve quantum readiness that allow us to prioritize our quantum-safety initiatives. By adopting this risk-based approach, we focus on the core journeys our security experts have identified as most vulnerable to the potential impacts of quantum computing.
These scenarios offer diverse platform perspectives to ensure global enablement across our services to meet you where you are.

For each risk domain, we provide a roadmap for key products and services organized by domain, although the services highlighted are not exhaustive lists. We project most services will meet their respective domain’s target completion date, though specific product timelines may be adjusted if necessary to account for evolving engineering requirements and any third-party dependencies. […]”