Security

Imagine

NOTE

Ethereum

<ul>
 <li><strong>Google’s new MPC service combines distributed signing, transaction policies and recovery tools, with commercial availability targeted for early 2027.</strong></li>
 <li><strong>The central security question is whether signing participants and administrative privileges are genuinely independent.</strong></li>
 <li><strong>Fireblocks, BitGo and Fordefi already compete in institutional wallet security, making operational control a critical point of comparison.</strong></li>
</ul>
<p>Google is bringing multi-party computation to institutional cryptocurrency custody, but the security of its new service will depend on more than splitting private keys across separate systems.</p>
<p>The company is previewing Google Multi-Party Compute (MPC) at its October 28 digital-assets symposium in New York. The product combines distributed signing, transaction approval policies and recovery capabilities. Several unnamed financial institutions are testing it, while Alphabet has begun using the technology to protect assets on Ethereum and Solana.</p>
<p>Commercial availability is targeted for early 2027, with pricing undisclosed, <strong><a href="https://www.coindesk.com/tech/2026/10/28/google-to-preview-crypto-custody-security-system-as-ai-threats-grow? target=" rel="noopener noreferrer nofollow">according to CoinDesk</a></strong>.<cite></cite></p>
<p>For banks, the unresolved issue is whether a managed cloud platform can deliver the same administrative independence that distributed cryptography is designed to provide.</p>
<h2 id="the-risk-of-distributing-keys-without-distributing-control">The Risk of Distributing Keys Without Distributing Control</h2>
<p>MPC allows several participants to jointly generate a transaction signature without reconstructing the complete private key in one location.</p>
<p>In a hypothetical two-of-three configuration, an attacker who compromises one signing share cannot independently authorize a transfer. Compromising two participants, however, could defeat that threshold if no additional controls intervene.</p>
<p>The arrangement becomes more complicated when all participants share an administrative environment.</p>
<p>Imagine a bank running three signing services under one cloud administrator. Although each service holds a separate cryptographic share, an attacker obtaining sufficiently broad administrative privileges could potentially compromise multiple participants or interfere with the systems enforcing approval rules.</p>
<p>This is an architectural risk scenario, not a reported vulnerability in Google’s product.</p>
<p>The stronger test is whether customers can isolate signing participants across independently controlled environments and prevent a single administrator from changing transaction policies or recovery procedures.</p>
<p><strong><a href="https://cloud.google.com/blog/products/identity-security/how-confidential-space-and-mpc-can-help-secure-digital-assets" rel="noopener noreferrer nofollow">Google’s earlier Confidential Space</a></strong> architecture provides relevant context. It describes protected execution environments and arrangements involving independent co-signers, including systems outside Google Cloud.</p>
<p>However, those earlier technical designs do not establish which deployment options, share ownership models or administrative boundaries are available in the new managed service.</p>
<h2 id="google-enters-an-established-institutional-custody-market">Google Enters an Established Institutional Custody Market</h2>
<p>Google is competing with providers that already offer distributed signing, custody infrastructure and transaction governance.</p>
<p>Fireblocks documents an MPC-based architecture in which customers can retain signing shares and configure approval policies. Its published materials also describe hybrid, on-premises and multi-cloud deployment options.</p>
<p>BitGo offers qualified custody alongside wallet infrastructure, including multisignature and MPC configurations. Fordefi focuses on MPC wallets, transaction simulation and policy controls for institutional blockchain operations.</p>
<p>These offerings are not interchangeable. Qualified custody concerns the legal and operational responsibility for holding assets, while MPC describes a cryptographic signing method. A bank can use MPC infrastructure without outsourcing legal custody, or engage a qualified custodian that uses several security technologies.</p>
<div style="max-width: 780px; margin: 28px auto; font-family: Arial,Helvetica,sans-serif; color: #202c3b;">
 <div style="background: #f3f5f7; border: 1px solid #d8dfe6; border-top: 4px solid #24577a; padding: 20px 18px 16px;">
  <div style="font-size: 10px; font-weight: bold; letter-spacing: 1.7px; color: #47718c;">
   DIGITAL ASSET SECURITY / RESEARCH NOTE
  </div>
  <div style="font-size: 23px; line-height: 1.25; font-weight: 800; color: #16293b; margin-top: 8px;">
   Who Controls the Signature?
  </div>
  <div style="font-size: 12px; line-height: 1.6; color: #617284; margin-top: 7px;">
   Comparing HSM custody, established enterprise MPC <br> and Google’s proposed managed signing service.
  </div>
 </div>
 <div style="background: #ffffff; border-left: 1px solid #d8dfe6; border-right: 1px solid #d8dfe6; padding: 14px 16px;">
  <table style="width: 100%; border-collapse: collapse; table-layout: fixed;">
   <tbody>
    <tr>
     <td style="width: 33.33%; padding: 0 5px 0 0; vertical-align: top;">
      <div style="border-top: 3px solid #8194a5; padding-top: 7px; font-size: 11px; font-weight: bold; color: #33485c;">
       HSM
      </div>
      <div style="font-size: 10px; color: #788895; margin-top: 3px;">
       Hardware custody
      </div></td>
     <td style="width: 33.33%; padding: 0 5px; vertical-align: top;">
      <div style="border-top: 3px solid #b68b55; padding-top: 7px; font-size: 11px; font-weight: bold; color: #33485c;">
       MPC
      </div>
      <div style="font-size: 10px; color: #788895; margin-top: 3px;">
       Enterprise providers
      </div></td>
     <td style="width: 33.33%; padding: 0 0 0 5px; vertical-align: top;">
      <div style="border-top: 3px solid #247d82; padding-top: 7px; font-size: 11px; font-weight: bold; color: #247d82;">
       GOOGLE
      </div>
      <div style="font-size: 10px; color: #788895; margin-top: 3px;">
       Managed MPC
      </div></td>
    </tr>
   </tbody>
  </table>
 </div>
 <div style="border: 1px solid #d8dfe6; border-bottom: 0; background: #ffffff; padding: 15px 16px;">
  <div style="font-size: 10px; font-weight: bold; letter-spacing: 1px; color: #788895; margin-bottom: 10px;">
   01 / KEY STORAGE
  </div>
  <table style="width: 100%; border-collapse: collapse; table-layout: fixed;">
   <tbody>
    <tr>
     <td style="width: 33.33%; padding: 9px 9px 9px 0; vertical-align: top; border-right: 1px solid #e4e9ee;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Protected within secure hardware.
      </div></td>
     <td style="width: 33.33%; padding: 9px; vertical-align: top; border-right: 1px solid #e4e9ee;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Shares distributed across participants.
      </div></td>
     <td style="width: 33.33%; padding: 9px 0 9px 9px; vertical-align: top;">
      <div style="font-size: 11px; line-height: 1.6; color: #176b70; font-weight: bold;">
       Distributed signing; share placement undisclosed.
      </div></td>
    </tr>
   </tbody>
  </table>
 </div>
 <div style="border: 1px solid #d8dfe6; border-bottom: 0; background: #f7f9fa; padding: 15px 16px;">
  <div style="font-size: 10px; font-weight: bold; letter-spacing: 1px; color: #788895; margin-bottom: 10px;">
   02 / TRUST BOUNDARY
  </div>
  <table style="width: 100%; border-collapse: collapse; table-layout: fixed;">
   <tbody>
    <tr>
     <td style="width: 33.33%; padding: 9px 9px 9px 0; vertical-align: top; border-right: 1px solid #e0e6eb;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Hardware protection and access controls.
      </div></td>
     <td style="width: 33.33%; padding: 9px; vertical-align: top; border-right: 1px solid #e0e6eb;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Threshold cryptography and node isolation.
      </div></td>
     <td style="width: 33.33%; padding: 9px 0 9px 9px; vertical-align: top;">
      <div style="font-size: 11px; line-height: 1.6; color: #176b70; font-weight: bold;">
       Managed controls; administrative independence unconfirmed.
      </div></td>
    </tr>
   </tbody>
  </table>
 </div>
 <div style="border: 1px solid #d8dfe6; border-bottom: 0; background: #ffffff; padding: 15px 16px;">
  <div style="font-size: 10px; font-weight: bold; letter-spacing: 1px; color: #788895; margin-bottom: 10px;">
   03 / TRANSACTION POLICY
  </div>
  <table style="width: 100%; border-collapse: collapse; table-layout: fixed;">
   <tbody>
    <tr>
     <td style="width: 33.33%; padding: 9px 9px 9px 0; vertical-align: top; border-right: 1px solid #e4e9ee;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Typically managed by surrounding custody software.
      </div></td>
     <td style="width: 33.33%; padding: 9px; vertical-align: top; border-right: 1px solid #e4e9ee;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Configurable approval and transaction rules.
      </div></td>
     <td style="width: 33.33%; padding: 9px 0 9px 9px; vertical-align: top;">
      <div style="font-size: 11px; line-height: 1.6; color: #176b70; font-weight: bold;">
       Integrated policy checks before signing.
      </div></td>
    </tr>
   </tbody>
  </table>
 </div>
 <div style="border: 1px solid #d8dfe6; background: #f7f9fa; padding: 15px 16px;">
  <div style="font-size: 10px; font-weight: bold; letter-spacing: 1px; color: #788895; margin-bottom: 10px;">
   04 / CLOUD DEPENDENCE
  </div>
  <table style="width: 100%; border-collapse: collapse; table-layout: fixed;">
   <tbody>
    <tr>
     <td style="width: 33.33%; padding: 9px 9px 9px 0; vertical-align: top; border-right: 1px solid #e0e6eb;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       On-premises or cloud-based deployments.
      </div></td>
     <td style="width: 33.33%; padding: 9px; vertical-align: top; border-right: 1px solid #e0e6eb;">
      <div style="font-size: 11px; line-height: 1.6; color: #344456;">
       Deployment options vary by provider.
      </div></td>
     <td style="width: 33.33%; padding: 9px 0 9px 9px; vertical-align: top;">
      <div style="font-size: 11px; line-height: 1.6; color: #176b70; font-weight: bold;">
       Independent signing options not fully documented.
      </div></td>
    </tr>
   </tbody>
  </table>
 </div>
 <div style="background: #eaf0f3; border: 1px solid #d8dfe6; border-top: 0; padding: 13px 16px;">
  <div style="font-size: 11px; line-height: 1.65; color: #5e7080;"><strong style="color: #24394b;">EDITORIAL NOTE</strong><br> This is an architectural comparison, not a <br> security ranking. HSMs and MPC can operate together. <br> Google’s precise implementation remains subject <br> to further disclosure.
  </div>
 </div>
 <div style="font-size: 11px; line-height: 1.6; color: #748390; padding: 10px 2px;"><span style="color: #222222; font-family: Verdana, BlinkMacSystemFont, -apple-system, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; font-size: 15px;">Google’s potential advantage is integration. Banks may be able to procure signing, policy enforcement and recovery through one managed platform rather than assembling separate components.</span>
 </div>
</div>
<p>The trade-off is the need to establish who can authorize transactions when the cloud provider, customer administrators or recovery systems are compromised.</p>
<h2 id="why-the-43-8-theft-figure-needs-context">Why the 43.8% Theft Figure Needs Context</h2>
<p><strong><a href="https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2025/" rel="noopener noreferrer nofollow">Chainalysis reported</a></strong> that private-key compromises accounted for 43.8% of cryptocurrency stolen in 2024, when total hacking losses reached approximately $2.2 billion. <cite></cite></p>
<p>Applying that percentage to the rounded total produces an indicative figure of roughly $964 million. It is not an estimate of losses that MPC would necessarily have prevented.</p>
<p>The distinction becomes clearer when considering a fraudulent institutional withdrawal.</p>
<p>A signing system could correctly enforce a two-of-three threshold while two authorized employees approve a malicious transfer. Alternatively, attackers might obtain enough administrative privileges to change approved destinations before the signing process begins.</p>
<p>Cryptographic protection, transaction authorization and administrative governance must therefore be assessed separately.</p>
<p>For a bank evaluating Google MPC, the most useful security evidence would include an independently assessed threat model, details of participant isolation, policy-change authorization and recovery procedures. None of those product-specific findings has been publicly established.</p>
<h2 id="post-quantum-protection-requires-more-than-mpc">Post-Quantum Protection Requires More Than MPC</h2>
<p>Google also plans to introduce post-quantum capabilities, although no product-specific release date has been confirmed. <cite></cite></p>
<p>The challenge involves the underlying signature algorithms, not simply the distribution of key shares.</p>
<p>ECDSA and Ed25519 rely on elliptic-curve cryptography, which a sufficiently capable future quantum computer could threaten. Distributing the signing process through MPC does not remove that underlying exposure.</p>
<p><strong><a href="https://ethnews.com/quantum-threat-to-crypto-is-closer-than-earlier-estimates-suggested/" rel="noopener noreferrer nofollow">Post-quantum algorithms</a></strong> such as ML-DSA, standardized by NIST, use different mathematical constructions and larger signature formats. ML-DSA-44 signatures are 2,420 bytes, compared with 64 bytes for a conventional Ed25519 signature.</p>
<p>That difference can affect transaction size, network fees and compatibility with blockchain verification rules. Building a distributed signing protocol for a post-quantum scheme also requires separate cryptographic engineering; existing threshold-ECDSA implementations cannot simply be relabeled quantum-resistant.</p>
<p>For Ethereum and Solana, compatibility ultimately depends on the signature mechanisms supported by the relevant blockchain and account architecture. A custody provider cannot independently make an unsupported on-chain signature scheme valid.</p>
<p>Google’s post-quantum roadmap is therefore relevant to its longer-term custody ambitions, but it does not resolve today’s questions about signing authority.</p>
<h2 id="what-would-establish-google-s-competitive-advantage">What Would Establish Google’s Competitive Advantage?</h2>
<p>Alphabet’s reported use of the technology provides an internal deployment reference, not independent proof of security or operational resilience.</p>
<p>Before commercial launch, institutional buyers need concrete answers about customer-held signing shares, administrative separation, recovery authority and service availability during a cloud outage.</p>
<p>Those disclosures would make it possible to compare Google with Fireblocks, BitGo and other providers on measurable control boundaries rather than branding or cryptographic terminology.</p>
<p>Google has established a commercial timetable. The evidence needed to judge whether its managed architecture genuinely reduces institutional custody risk is still incomplete.</p>
<p>The post <a href="https://ethnews.com/googles-crypto-security-push-raises-a-key-custody-question/" rel="noopener noreferrer nofollow">Google’s Crypto Security Push Raises a Key Custody Question</a> appeared first on <a href="https://ethnews.com" rel="noopener noreferrer nofollow">ETHNews</a>.</p>

Google’s Crypto Security Push Raises a Key Custody Question

Table of Contents

ETHNews

Other articles published on Oct 28, 2026

Join our free newsletter for daily crypto updates!