[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-05 (世界標準時間)。"],[],[],null,["# Standard Cloud Storage encryption\n\nCloud Storage always encrypts your data on the server side, before it is\nwritten to disk, at no additional charge. This page discusses the standard\nencryption that Cloud Storage performs. For other encryption options,\nsee [Data Encryption Options](/storage/docs/encryption).\n\nCloud Storage manages server-side encryption keys on your behalf using\nthe same hardened key management systems that we use for our own encrypted data,\nincluding strict key access controls and auditing. Cloud Storage\nencrypts user data at rest using [AES-256](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard), in most cases using\n[Galois/Counter Mode (GCM)](http://wikipedia.org/wiki/Galois/Counter_Mode). There is no setup or\nconfiguration required, no need to modify the way you access the service, and\nno visible performance impact. Data is automatically decrypted when read by an\nauthorized user.\n\nFor more information about how Google Cloud and Cloud Storage manage\nencryption keys, see [Default encryption at rest](/docs/security/encryption/default-encryption).\n\nTo protect your data as it travels over the Internet during read and write\noperations, use Transport Layer Security, commonly known as TLS or HTTPS.\n\nWhat's next\n-----------\n\n- Learn more about [Choosing an encryption option](/storage/docs/encryption).\n\n- For more information about how Google-owned and Google-managed encryption keys are rotated, managed,\n and stored, see [Key management](/docs/security/encryption/default-encryption#key_management).\n\n- See [Encryption at the storage system layer](/docs/security/encryption/default-encryption#hardware) to learn about the\n encryption modes that are used in Google Cloud."]]
