Google will now let cloud partners hold their own encryption keys

See the original posting on The Verge

Google is adding another layer of protection for its cloud computing customers. Starting today, the company will let users hold their own encryption keys for Google Compute Engine, the company’s cloud processing platform. Google already encrypts data on the platform, but it manages the keys itself, leading to concern among some that the company could be compelled to decrypt the data without the user’s permission. Under the new system, Compute Engine users will be able to manage their own keys, preventing Google or any other party from decrypting the data without somehow obtaining the offsite keys.

The program is similar to the key management system Box launched in February, although the Google program focuses on computing features…

Continue reading…