We’re Building the Future of Data Infrastructure

April 15, 2024

Infosec Global and Marvell partner to provide Crypto Agility in the Cloud

By Bill Hagerstrand, Director of Security Solutions at Marvell

InfoSec Global, a leader in cryptographic agility management analytics software, and Marvell, a leader in Cloud based HSMs (Hardware Security Modules), have partnered to enable visibility and security in the cloud.

The Marvell® LiquidSecurity® family is a solution of hardware security modules (HSMs) based on a PCIe form factor instead of traditional 1U and 2U pizza boxes They are purposely designed to enable CSPs (Cloud Service Providers) to offer security services in a cloud environment. Not only does the smaller form factor and optimized processing of LiquidSecurity provide a path to reduce the cost, overhead, and rack space needed for performing encryption and key management, partitions and others performance features enable clouds to serve a large number of customers in a flexible manner.

LiquidSecurity 2, our latest model, can manage up to 1 million keys and supports 42 partitions for secure multitenancy in a single PCIe slot. Cloud-based HSMs are the fastest-growing segment of the HSM market and LiquidSecurity is a pioneer in optimizing HSMs for cloud data centers1. Six of the ten largest CSPs enable encryption and/or key management using LiquidSecurity HSMs as the root of trust2.

Infosec’s AgileSec Analytics & Agility platform software can be run in the cloud to continuously monitor and understand the reliance on cryptography from a risk and compliance perspective. With this platform, the CSP’s end customers will have visibility into their cryptographic posture, can mitigate the risk of data loss or compliance breaches due to hidden cryptographic vulnerabilities, and maintain an up-to-date inventory of the security postures of all systems and services.  The company’s software is used widely among Fortune 500 companies3.

Marvell HSMs running in a particular CSP can be chosen as the root of trust for cryptographic keys used to encrypt a database or any blob of information and with improved visibility and management of cryptographic material and algorithms customers can be confident migrating and consolidating their data with CSPs. Now, they will  have access to the latest and most advanced algorithms including PQC (Post Quantum Cryptography) or be able to easily enforce minimum key sizes through policies. These capabilities are orchestrated from the AgileSec Platform allowing easy enforcement of policy and inventory reporting.

This added visibility, flexibility, and control are much needed when applications can be run on-premises or across multiple cloud environments.

Our collaboration with Infosec is part of an initiative to cultivate an ecosystem for cloud encryption. Encryption remains one of the best tools for improving security, but it can be under-utilized because of challenges of implementation and day-to-day use. By working closer with companies like Infosec, we can remove these roadblocks.

 

1. Marvell estimates based on industry analyst reports

2. Marvell. CSPs ranked for top ten by revenue.

3. infosec Global

# # #

Marvell and the M logo are trademarks of Marvell or its affiliates. Please visit www.marvell.com for a complete list of Marvell trademarks. Other names and brands may be claimed as the property of others.

This blog contains forward-looking statements within the meaning of the federal securities laws that involve risks and uncertainties. Forward-looking statements include, without limitation, any statement that may predict, forecast, indicate or imply future events, results or achievements. Actual events, results or achievements may differ materially from those contemplated in this blog. Forward-looking statements are only predictions and are subject to risks, uncertainties and assumptions that are difficult to predict, including those described in the “Risk Factors” section of our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q and other documents filed by us from time to time with the SEC. Forward-looking statements speak only as of the date they are made. Readers are cautioned not to put undue reliance on forward-looking statements, and no person assumes any obligation to update or revise any such forward-looking statements, whether as a result of new information, future events or otherwise.

Tags: Security

Recent Posts

Archives

Categories