Collaborate Disseminate
More than 60% of organizations don’t hold full awareness of certificates and keys across their digital assets, according to a research from AppViewX. Over the course of the pandemic, as enterprises were forced to accelerate their digital transfor… Continue reading Why should enterprises invest in machine identity management tools?
I need to encrypt personal data like email, phone number, etc. I am using AWS KMS for managing the encryption keys. This is the system that is already implemented is as follows:
All the existing data is encrypted using a worker which firs… Continue reading How to manage Encryption Key for Server Side Encryption in AWS S3
According to KMIP user’s guide, when a client application desires to retrieve a 512 bits AES-XTS key, it should request 2 separate KMIP keys of 256 bits each. This is to support the structure of an AES-XTS key, which consists of two keys: … Continue reading Why does KMIP require to request two keys for AES-XTS?
How do cloud providers (like AWS, GCE, Azure) secure their servers against stealing server TLS keys? Do they use HSMs?
I aim to backup my gnupg private key by writing it down on paper. The software paperkey seems to be promising, but one of its behaviors is unexpected.
I do the following
$ gpg –export-secret-keys –output secret.gpg "My Key Id"
… Continue reading paperkey generates different output every time [closed]
How to manage encryption keys used to encrypt data that will be stored in a vulnerable cloud?
I need to implement such a feature in an application.
How to encrypt it properly and manage the encryption keys?
No matter how the encrypted dat… Continue reading How to manage keys for data stored in the cloud? [closed]
Given the usage of AWS KSM without CloudHSM. There is a two-tier key hierarchy: master key + data key. Master key encrypts data key, data key encrypts data. Encrypted data key is stored with the data it encrypted. Encryption/decryption of … Continue reading AWS KMS CMK compromise
It’s been often said that the only two certain things in life are death and taxes. Over the past ten years, it seems data breaches can be added to this list. Can an organization really be completely safe – without fear of losing confidential or r… Continue reading Can the public cloud become confidential?
We have a web server with an application – there is a large data array attached to the application via a mount point. We have to fulfill the requirement of securing in-transit data and at-rest data. This application is designed to host a r… Continue reading Is there an encryption mechanism for binary data with expiration for rotating keys?
In AWS KMS I can set a key policy on a CMK so that it can only be used from within a Nitro Enclave that either has a particular signature or a particular image hash. Is there something similar to this for Azure Key Vault and/or Google KMS?… Continue reading Nitro Enclave / KMS Equivalent for Google and Azure