back to article Cloud is a key-management pain: NIST

The ISA's National Institute of Standards and Technology (NIST) – recently accused of collaborating with the NSA to weaken security standards – has put together a paper highlighting the key-management challenge posed by cloud computing platforms. As readers will know, key multiplication (and therefore management) can be headache …

COMMENTS

This topic is closed for new posts.
Silver badge

Send Corrections

...spreading 1unwanted keys...

Yes, there's a button for that. But since that requires me to have an email application registered I can't be bothered using it.

1
0
Silver badge

Sounds like common sense advice

Unfortunately they're also considered a puppet for the alphabet agencies and nobody will ever take them seriously again. They might as well disband now and save the money.

0
1
Gold badge
Unhappy

All pretty irrelevant if the servers sit in a country with *no* effective data protection.

Like for example America with THE PATRIOT Act in force.

0
0
GPN

Some solutions also exist

Well, full disclosure - this is a bit blowing our own horn - but we've built a solution to the cloud key management problem using homomorphic key encryption and split-key encryption. The idea is to give you the full flexibility of Infrastructure and Platform clouds while ensuring high security and - most importantly - leaving control of the keys in your own hands (not any alphabet-soup agency...). Take a look: http://www.porticor.com/technology/

0
0
This topic is closed for new posts.

Forums