HACKER Q&A
📣 s-xyz

Why does Google have a much lower FIPS Encryption Level compared to IBM?


FIPS 140-2 is a standard which handles cryptographic modules and the ones that organizations use to encrypt data-at-rest and data-in-motion. FIPS 140-2 has 4 levels of security, with level 1 being the least secure, and level 4 being the most secure.

Google Cloud has level 1, and IBM Cloud level 4.

Why did Google not pursue level 4, and does it matter? If it does matter, under which circumstances would a company choose to select IBM Cloud due to this higher level?


  👤 s-xyz Accepted Answer ✓

👤 s-xyz
After further investigation, it seems that Google does have level 3 for the HSM part (similar to Hyper Protect of IBM). Its level 1 for the software components, which is practically one of the highest possible.

The question changes then to why did Google not pursue level 4.


👤 throwawaynay
to protect you from most criminals while still allowing the 3 letters agencies to spy on you

don't forget that google was partially funded by CIA and NSA grants