The Imported Key Travels in a Quantum-Resistant Envelope
Google Cloud has opened a preview of quantum-resistant key import in Cloud KMS, wrapping customer key material in ML-KEM and X-Wing envelopes designed to resist known classical and quantum attacks on a recorded transfer. We read what the release means for harvest now, decrypt later exposure, why the wrapped key is the densest target that attack pattern has, and what still separates a preview label from a bring your own key mandate a program office can rely on.