Oasis' open Enterprise Key Management Infrastructure initiative promises less-complex encryption. But will vendors get on board?
News: Submitted by dschur on Fri, 07/04/2008 - 13:50.
Information security pros do put stock in encryption--it was named the
third-most-effective security practice in our most recent Strategic
Security Survey, behind only firewalls and antivirus products. However,
there have been obstacles along the path to ubiquitous encryption of
data, including weak ciphers, deployment and integration issues, and,
perhaps most notably, key management.
Public key infrastructure, or PKI, systems alone have simply failed to
address the challenge of keeping encryption keys in order. Enter the
Enterprise Key Management Infrastructure initiative, a promising
program spearheaded by the Oasis consortium, with organizations
including CA, Red Hat, the U.S. Department of Defense, and Wells Fargo
represented on the technical committee.