Published by Jessica Weisman-Pitts
Posted on October 27, 2022
3 min readLast updated: February 3, 2026
27 October 2022 – Cryptomathic, a leading encryption key management specialist, today launches the Cryptomathic AWS BYOK Service, a cloud-based service that enables security-conscious users of Amazon Web Services globally to harness enterprise-class Bring Your Own Key (BYOK) encryption key management capabilities on demand.
BYOK encryption management offers enterprises the opportunity to forego influence a cloud provider’s default generated encryption keys, by adding their own, thereby increasing security and control while simultaneously simplifying compliance audits. In response to the growing demand for BYOK among organizations which lack the technical resources to take advantage of BYOK encryption in AWS public cloud, Cryptomathic has created a truly self-service SaaS solution, backed by HSMs (hardware security modules).
Matt Landrock, CEO, Cryptomathic Inc. comments: “All companies should have the opportunity to access best-in-class cloud security. Yet, until now, advanced encryption key management approaches like Bring Your Own Key have only been available to organizations that have the technical knowledge and resources needed to maintain hosting and managing their own HSMs. Today, Cryptomathic is changing that. The Cryptomathic AWS BYOK Service brings enterprise-class encryption key management to companies of all shapes and sizes, in the form of a simple, user-friendly, subscription-based cloud service. We’re making the management of encryption key lifecycles accessible and automated, while remaining fully auditable and, importantly, keeping those BYOK keys under the control of the user.”
With Cryptomathic’s AWS BYOK Service, cloud customers can add cryptographic key material to the AWS key hierarchy, thereby enhancing the security model with additional entropy from their preferred source. AWS combines this key material with their own, making for a truly unique set of keys used to protect the encryption keys in question. In other words, as long as a business always remains in possession of its keys, and those keys are kept secure—such as within a hardware security module (HSM)—the enterprise can be confident that they are truly in control of their encrypted data.
The Cryptomathic AWS BYOK Service provides the following benefits:
The Cryptomathic AWS BYOK Service is now live and accessible to companies globally, today. Details of subscription packages can be found here.
Hardware Security Modules (HSMs) are physical devices used to manage digital keys for strong authentication and provide cryptographic processing.
GDPR compliance refers to adhering to the General Data Protection Regulation, which governs data protection and privacy in the European Union.
AES-256 encryption is a symmetric encryption standard that uses a 256-bit key length, providing a high level of security for data.
A cloud-based service is a service that is hosted on the internet and accessed remotely, allowing users to utilize resources without local infrastructure.
Explore more articles in the Technology category
