KMS/OKM - Information on Encryption Algorithm Used

Asset ID:	1-79-1542489.1
Update Date:	2017-10-27
Keywords:

Solution Type Predictive Self-Healing Sure

Solution 1542489.1 : KMS/OKM - Information on Encryption Algorithm Used

Applies to:

Sun StorageTek SL500 Modular Library System - Version All Versions and later
Information in this document applies to any platform.

Purpose

To clarify the hardware encryption algorithm that KMS/OKM uses.

Details

KMS/OKM use:

Advanced Encryption Standard (AES)
Key length is 256 bits (AES-256)
Strongest encryption key length available in the market for commercial application
AES-256 is NSA approved to protect classified information up-to Top Secret level

AES, which stands for “Advanced Encryption Standard,” is a block cipher encryption algorithm that uses both of these cryptographic techniques—Counter mode and CBC-MAC (CCM).

AES is a National Institute of Standards and Technology (NIST) standard defining a cryptographic cipher that uses a block length and the Rijndael symmetric block cipher algorithm.

KMS creates 256-bit secret Master Key during configuration, uses Shamir Shared Secret Algorithm to split the Master Key

KMS/OKM Documentation can be found on: http://www.oracle.com/technetwork/indexes/documentation/tape-storage-curr-187744.html#crypto

Attachments

This solution has no attachment