AWS Key Management Service vs Eviden KMS

AWS Key Management Service creates and controls cryptographic keys for data encryption and digital signatures. It centralizes key lifecycles and permissions, including separate control over administrators and key users. KMS supports symmetric encryption, asymmetric signing or encryption pairs, and HMAC generation and verification. The AWS Encryption SDK can use KMS as a key provider for local application encryption and decryption. Integrations include Amazon S3, EBS, RDS, DynamoDB, Lambda, and CloudTrail. With CloudTrail enabled, requests can record the user, time, API action, and key. AWS says hardware security modules validated to FIPS 140-3 Security Level 3 protect key material and operations, with plaintext keys kept only in volatile HSM memory. Multi-Region keys support cross-Region workflows; external key stores keep material in a customer-managed external manager. KMS scales with demand but has default key and request limits. The listed plan is $1 a month per KMS key, prorated hourly.

Eviden KMS centralizes encryption and decryption, key management, and certificate management. Its architecture combines key lifecycle management, an encryption oracle, and public key infrastructure. Administrators can generate, store, rotate, distribute, and revoke keys, and set access policies. The product supports FIPS 140-3 mode and KMIP versions 1.0–1.4 and 2.0–2.1 in binary and JSON formats, but implements a targeted subset rather than the entire KMIP standard. Listed integrations include Trustway Proteccio, Crypt2Pay, Utimaco, Nitrokey HSM 2, and SmartCard HSMs; cloud options include Azure BYOK, GCP CSEK and CMEK, AWS BYOK, and AWS Fargate. It also integrates with Google Workspace Client-Side Encryption, Microsoft 365 Double Key Encryption, and several databases. Deployment options include Debian and RPM packages, Windows and macOS installers, and standard or FIPS Docker images. Its web GUI supports client certificates and OIDC token authentication. Pricing is on request, with per-CPU pricing, connectors included, and any number of servers.