Summary

As companies migrate applications and data to the cloud, and as cloud-native applications continue to emerge, demand is increasing for cloud services that support cryptographic key management and cryptographic operations, such as encryption.

Cryptographic key resource pool can serve as an infrastructure for providing cryptographic key management and cryptographic operation services in a multi-tenant cloud computing environment. In such a pool, hardware security modules (HSMs) are virtualized as virtual security modules (VSMs), and VSMs are created, provisioned, orchestrated and scaled up or down, according to the demands of cloud service customers (CSCs).

Recommendation ITU-T X.1632 specifies requirements and a framework for a cryptographic key resource pool for multi-tenant cloud computing.