# On the fly key generation for cloud storage objects

Cryptographic key management involves storing and managing encryption decryption keys , certificates , signatures etc .

If the requirement is just to store and manage object specific keys ( say amazon's s3 store objects ) do we really require a key management solution like the one from porticor or an appliance ? Instead can't we generate object specific keys "on the fly" using HKDF using a master key and object id as inputs, so that we dont have overhead of storing and managing keys each time ?

-
The fact that all of the keys can be calculated from the master key and object ids. $\qquad \qquad \qquad$ – Ricky Demer Nov 9 '12 at 5:27
@ricky ,did not get you , i edited the question for more clarity . – sashank Nov 9 '12 at 6:06