4 ms·
Ask HN: Why does Google have a much lower FIPS Encryption Level compared to IBM?
FIPS 140-2 is a standard which handles cryptographic modules and the ones that organizations use to encrypt data-at-rest and data-in-motion. FIPS 140-2 has 4 levels of security, with level 1 being the least secure, and level 4 being the most secure.
Google Cloud has level 1, and IBM Cloud level 4.
Why did Google not pursue level 4, and does it matter? If it does matter, under which circumstances would a company choose to select IBM Cloud due to this higher level?
- s-xyz 5y agoLink to Google Encryption page: https://cloud.google.com/security/encryption/default-encryption https://cloud.google.com/security/encryption/default-encrypt... Link to IBM: https://www.ibm.com/cloud/hyper-protect-crypto https://www.ibm.com/cloud/hyper-protect-crypto
- throwawaynay 5y agoto protect you from most criminals while still allowing the 3 letters agencies to spy on you don't forget that google was partially funded by CIA and NSA grants
- s-xyz 5y agoAfter further investigation, it seems that Google does have level 3 for the HSM part (similar to Hyper Protect of IBM). Its level 1 for the software components, which is practically one of the highest possible. The question changes then to why did Google not pursue level 4.