Google to encrypt Cloud Storage data by default
Users can choose if they want to hold the encryption keys themselves
IDG News Service - Google said Thursday it will by default encrypt data warehoused in its Cloud Storage service.
The server-side encryption is now active for all new data written to Cloud Storage, and older data will be encrypted in the coming months, wrote Dave Barth, a Google product manager, in a blog post.
"If you require encryption for your data, this functionality frees you from the hassle and risk of managing your own encryption and decryption keys," Barth wrote. "We manage the cryptographic keys on your behalf using the same hardened key management systems that Google uses for our own encrypted data, including strict key access controls and auditing."
The data and metadata around an object stored in Cloud Storage is encrypted with a unique key using 128-bit Advanced Encryption Standard algorithm, and the "per-object key itself is encrypted with a unique key associated with the object owner," Barth wrote.
"These keys are additionally encrypted by one of a regularly rotated set of master keys," he wrote. "Of course, if you prefer to manage your own keys then you can still encrypt data yourself prior to writing it to Cloud Storage."
Data collection programs revealed by former U.S. National Security Agency contractor Edward Snowden have raised questions about U.S. government data requests made to Internet companies such as Google for national security investigations.
A Google spokeswoman said via email the company does not provide encryption keys to any government and provides user data only in accordance with the law.
"Our legal team reviews each and every request, and we frequently push back when the requests appear to be fishing expeditions or don't follow the correct process," she wrote. "When we are required to comply with these requests, we deliver it to the authorities. No government has the ability to pull data directly from our servers or network."
Send news tips and comments to firstname.lastname@example.org. Follow me on Twitter: @jeremy_kirk
- Data Evolution: Data Management Supersedes DI Toolbox To address the emerging issues around managing, governing and utilizing data, organizations have been acquiring quite a toolbox of data integration tools and...
- Cloud Encryption Cheat Sheet This 2-page cheat sheet provides an overview of the functionality and strength of cloud encryption schemes including searchable encryption, format preserving encryption, and...
- Checklist for Selecting Enterprise-Ready Cloud Applications To minimize risk, organizations must employ a methodology to identify and select enterprise-ready cloud services. This 21 step checklist includes the five categories...
- 5 Ways Dropbox for Business Keeps Your Data Protected Protecting your data isn't a feature on a checklist, something to be tacked on as an afterthought. Download here to find out how...
- Princess Cruises collaborates across the globe in the IBM cloud This video explains how IBM and the Cloud helped the company rapidly scale its infrastructure and respond to the growing need to collaborate...
- Pivotal CF: The Journey to Great Software Begins Here The concept of PaaS is not new, but a new class is emerging. This second generation of hybrid PaaS allows technologists to have... All Cloud Storage White Papers | Webcasts