Google Cloud has introduced Google Multi-Party Compute, a new crypto custody service for banks that distributes control of cryptographic keys across multiple environments. This innovative approach ensures that no single provider, including Google, holds all the key material, significantly enhancing security and mitigating risks associated with centralized key management. The service, set for general availability in early 2027, aims to bolster institutional adoption of digital assets by providing a secure and scalable infrastructure.
The service allows banks to store key shares on their own hardware, Google Cloud, or rival providers, preventing plaintext access by any single party. Google’s offering competes with existing solutions from firms like Fireblocks and BitGo, positioning Google as a key player in the evolving digital asset security landscape.
READ MORE FROM UNCHAINED CRYPTO
Google Cloud is stepping into the digital asset arena with a new service designed to address the security concerns of banks and financial institutions looking to safeguard cryptocurrencies. Dubbed Google Multi-Party Compute, this innovative key-signing service aims to decentralize control of cryptographic keys, ensuring that no single entity, including Google itself, holds exclusive access.
The service, showcased at Google's inaugural digital assets event, allows banks to distribute the control of a private key across multiple environments. This could involve storing one key share on the bank's own hardware, another within Google Cloud, and a third with a competing cloud provider. Google emphasizes that its system is designed to prevent it from reading customer key shares in plain text, even those hosted on its own servers. Currently in private preview, the service leverages threshold signing combined with robust transaction policies and governance controls, as detailed in Google's documentation.
Rich Widmann, director of digital assets strategy at Google Cloud, highlighted the critical need for scalable and proven infrastructure as regulated financial institutions increasingly adopt blockchain technology and tokenization. "Digital asset adoption and tokenization are at an inflection point," Widmann stated. "As regulated financial institutions begin adopting blockchains and tokenization, they need scalable, proven infrastructure to secure their clients’ assets."
Distributing Control, Not Compromising Security
The core innovation of Google Multi-Party Compute lies in its approach to key management. Each share of a private key is generated and held by a distinct party on its own secure hardware. These parties collaborate to sign transactions without ever reconstructing the complete private key. This multi-party approach significantly mitigates risk, as an attacker compromising fewer parties than the predefined signing threshold cannot forge a signature or reconstruct the key. Google offers flexibility by allowing customers to set their own thresholds, providing examples like 2-of-3 and 5-of-7 configurations.
Furthermore, a sophisticated policy engine, operating within Google's Confidential Space environment, vets each transaction against predefined rules, such as spending limits and approved recipient addresses. While the verdict of this engine is advisory and can be overridden by sufficient Signers, it provides an crucial layer of governance and control.
This move positions Google directly against established players in the institutional crypto custody space, including Fireblocks, BitGo, and Fordefi, all of which offer solutions for securing and approving blockchain transactions.
Addressing Modern and Future Threats
Google is positioning its new service as a defense against both current and emerging threats, including AI-driven attacks and the potential risks posed by quantum computing. The service aims to protect against familiar vulnerabilities such as stolen or misused keys, system outages, and lost key material. Google also stated its commitment to future-proofing the service by enabling upgrades to post-quantum signing capabilities as blockchains evolve.
The service will support widely used cryptographic standards like ECDSA (for Bitcoin and Ethereum) and Ed25519 (for Solana) upon its general availability. While Solana integration is marked as "coming soon" on the overview page, recent release notes indicate progress with distributed signing for Ed25519.
Google's parent company, Alphabet, is already utilizing the service internally for its own Ethereum and Solana holdings, signaling confidence in its capabilities. General availability is anticipated in early 2027, with pricing details yet to be announced.
Related Listen: Bitcoin Custody Has 5 Levels. Where Should Your Keys Actually Live?
