KMS-GCP

GCP cryptographic key service.

Definition

GCP KMS organises keys as KeyRing → Key → KeyVersion. Supports symmetric (AES-256-GCM), asymmetric (RSA 2K/3K/4K, EC P-256/P-384). External Key Manager (EKM) allows keeping the key at the customer (Thales, Fortanix). Tarif $0.06/key/month software, $1-$2.50 HSM.

Origin

Launched by Google March 2017 ; HSM-backed August 2018 ; EKM April 2020.

Example in context

A fintech encrypts its BigQuery with a CMEK (Customer-Managed Encryption Key) in GCP KMS.

Related terms

• AWS KMS — AWS twin.