--- title: Enabling end-to-end checksums in Cloud Storage | daily.dev description: Google Cloud Storage now enables end-to-end checksumming by default across all its SDKs, closing a gap where uploads without client-provided checksums were... canonical: https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Enabling end-to-end checksums in Cloud Storage | daily.dev og:description: Google Cloud Storage now enables end-to-end checksumming by default across all its SDKs, closing a gap where uploads without client-provided checksums were... og:url: https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6 og:image: https://api.daily.dev/og/posts/EKoMSBfF6.png og:image:alt: Enabling end-to-end checksums in Cloud Storage og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Enabling end-to-end checksums in Cloud Storage **[Google Cloud](https://daily.dev/sources/gcp)** · 6 min read · 0 upvotes · 0 comments ## Summary Google Cloud Storage now enables end-to-end checksumming by default across all its SDKs, closing a gap where uploads without client-provided checksums were vulnerable to bit flips before server-side verification. The latest SDK versions automatically compute and pass checksums during upload and verify them during download, including for range reads over gRPC which leverage built-in end-to-end range checksums. The post also details the internal chain-of-custody architecture, covering encryption verification, chunk and shard-level CRCs, Colossus Reed-Solomon encoding, and disk-level inline checksums, and recommends developers update to the latest SDK to benefit from these protections. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Does the Google Cloud Storage SDK automatically checksum data during upload now? Yes, the latest version of all Cloud Storage SDKs internally computes a checksum for uploaded data and passes it to Cloud Storage if the application hasn't already provided one. Previously, uploads without a client-provided checksum were vulnerable to undetected bit flips occurring before the server-side checksum computation, since not all clients enabled client-side checksums by default. _developers relying on object storage integrity can track SDK changes like this via daily.dev before upgrading production pipelines._ ### How does Cloud Storage verify data integrity during a range read over gRPC? Cloud Storage chunks uploaded data and computes a checksum for each chunk; when using the gRPC API to read a byte range of an object, the SDK takes advantage of gRPC's built-in end-to-end range checksum, derived from these chunk-level checksums, to verify the received data without needing to re-checksum the whole object. _teams debugging data corruption in range reads can follow storage integrity deep dives like this on daily.dev._ ### How does Cloud Storage prevent bit flips during server-side encryption from corrupting data? Cloud Storage checksums the ciphertext immediately after encrypting the plaintext, then decrypts that ciphertext again and compares it to the original plaintext; if they don't match, the entire operation is discarded and retried. This costly extra encryption and checksumming step catches rare memory bit flips that occur during the encrypt copy at Google's operating scale. _engineers designing integrity checks around encryption pipelines can find architecture breakdowns like this on daily.dev._ ## Similar posts on daily.dev - [Your cloud storage can read your files. Here’s why that matters.](https://daily.dev/posts/your-cloud-storage-can-read-your-files-here-s-why-that-matters--8mdk8miv2) · All Things Open · 0 upvotes · 0 comments - [Filestore file service runs on Colossus](https://daily.dev/posts/filestore-file-service-runs-on-colossus-p1h3quzmc) · Google Cloud · 1 upvotes · 0 comments - [Don't Trust, Verify: Building End-to-End Confidential Applications on Google Cloud](https://daily.dev/posts/don-t-trust-verify-building-end-to-end-confidential-applications-on-google-cloud-ljyghaznk) · Google Developers · 0 upvotes · 0 comments - [Healthchecks.io Now Uses Self-hosted Object Storage](https://daily.dev/posts/healthchecks-io-now-uses-self-hosted-object-storage-q1jkkyrel) · Hacker News · 0 upvotes · 0 comments - [Inside AWS S3: A Deep Technical Dive Into the Engine That Stores the Internet](https://daily.dev/posts/inside-aws-s3-a-deep-technical-dive-into-the-engine-that-stores-the-internet-wxnf8s6ea) · Medium · 0 upvotes · 0 comments --- Tags: [#gcp](https://daily.dev/tags/gcp), [#grpc](https://daily.dev/tags/grpc) [View this post on daily.dev](https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Enabling end-to-end checksums in Cloud Storage","url":"https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6"},"datePublished":"2026-10-01T16:07:14.505Z","dateModified":"2026-10-01T16:07:42.631Z","description":"Google Cloud Storage now enables end-to-end checksumming by default across all its SDKs, closing a gap where uploads without client-provided checksums were...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/252cebaa60b24dc4670209d4d270d985?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/252cebaa60b24dc4670209d4d270d985?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Google Cloud","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Google Cloud","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/gcp","url":"https://daily.dev/sources/gcp"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"gcp,grpc","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Google Cloud","item":"https://daily.dev/sources/gcp"},{"@type":"ListItem","position":3,"name":"Enabling end-to-end checksums in Cloud Storage"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/enabling-end-to-end-checksums-in-cloud-storage-ekomsbff6#faq","mainEntity":[{"@type":"Question","name":"Does the Google Cloud Storage SDK automatically checksum data during upload now?","acceptedAnswer":{"@type":"Answer","text":"Yes, the latest version of all Cloud Storage SDKs internally computes a checksum for uploaded data and passes it to Cloud Storage if the application hasn't already provided one. Previously, uploads without a client-provided checksum were vulnerable to undetected bit flips occurring before the server-side checksum computation, since not all clients enabled client-side checksums by default. developers relying on object storage integrity can track SDK changes like this via daily.dev before upgrading production pipelines."}},{"@type":"Question","name":"How does Cloud Storage verify data integrity during a range read over gRPC?","acceptedAnswer":{"@type":"Answer","text":"Cloud Storage chunks uploaded data and computes a checksum for each chunk; when using the gRPC API to read a byte range of an object, the SDK takes advantage of gRPC's built-in end-to-end range checksum, derived from these chunk-level checksums, to verify the received data without needing to re-checksum the whole object. teams debugging data corruption in range reads can follow storage integrity deep dives like this on daily.dev."}},{"@type":"Question","name":"How does Cloud Storage prevent bit flips during server-side encryption from corrupting data?","acceptedAnswer":{"@type":"Answer","text":"Cloud Storage checksums the ciphertext immediately after encrypting the plaintext, then decrypts that ciphertext again and compares it to the original plaintext; if they don't match, the entire operation is discarded and retried. This costly extra encryption and checksumming step catches rare memory bit flips that occur during the encrypt copy at Google's operating scale. engineers designing integrity checks around encryption pipelines can find architecture breakdowns like this on daily.dev."}}]} ```