Quantum computing is being used to overcome problems that are difficult for traditional supercomputers to handle, such as drug research and development, materials science, and energy. However, it may also crack currently widely used encryption algorithms in the future, causing large-scale security risks. To this end, industry giants and standards organizations have been promoting "post-quantum cryptography" (PQC) for many years, hoping to complete the upgrade of key infrastructure before quantum computers are truly "available."
After Microsoft announced last year that it would officially provide post-quantum cryptographic algorithm support in Windows Server 2025, Windows 11 (24H2, 25H2) and .NET 10, Google recently announced its complete roadmap for the quantum era. Google has officially given a timetable for 2029. It plans to complete the migration of its entire ecosystem to the post-quantum cryptography system before this time, and take the lead in implementing relevant capabilities on the Android platform.
According to information released by Google, starting from the next version of Android 17 beta, the system layer will gradually access a number of PQC enhancements. Among them, the two core upgrades focus on the two key security components of Android Verified Boot (AVB) and device remote attestation (Remote Attestation).
In terms of boot chain protection, the Android Verified Boot library will integrate the "Module-Lattice-Based Digital Signature Algorithm (ML‑DSA)" to replace traditional signature schemes that are vulnerable to quantum attacks. With the help of this quantum-resistant digital signature mechanism, the integrity and origin of the operating system and key software loaded during the startup process of the device will remain highly credible in the quantum computing threat environment, preventing the boot chain from being tampered with to the greatest extent.
In terms of remote attestation, Android 17 will initiate the transition to a fully compliant architecture with current post-quantum standards. Google will update KeyMint's certificate chain to support quantum-resistant algorithms, allowing devices to maintain credibility and security even in the future quantum era when proving their status to "trusted parties" such as cloud services and enterprise management systems.
In addition to system-level enhancements, Android 17 will also provide developers with more convenient PQC support, making it easier for applications themselves to access quantum security capabilities. Android Keystore will natively support ML‑DSA, allowing developers to generate and use quantum-safe signature keys directly within device security hardware to complete key signing operations without leaving the secure environment. At the same time, the new PQC SDK will allow developers to use parameter sets such as ML‑DSA‑65 and ML‑DSA‑87 in the standard KeyPairGenerator API to adapt to different security and performance requirements.
At the application distribution level, Google also announced that Google Play will provide developers with the ability to automatically generate "hybrid signature blocks" (hybrid signature blocks). This mechanism will include both classical cryptographic keys and post-quantum cryptographic keys in the signatures of applications and games. Through this "classic + PQC" hybrid model, the existing trust system can continue to be used without excessively interrupting the ecosystem, and at the same time, a line of defense is added to the attack surface in the future quantum era in advance to prevent applications from encountering unauthorized malicious updates or tampering in the post-quantum environment.
Overall, the 2029 timetable given by Google this time marks that the systematic migration of the Android ecosystem in the direction of "post-quantum cryptography" has officially entered the time-locked stage. From the startup chain, remote attestation to underlying key management and application distribution, Google is trying to build a quantum security protection system throughout the entire life cycle of the device to "reinforce the foundation" for the upcoming quantum computing era.