Key-Associated Data Descriptors List; Table 3-168 Key Association Descriptor Format - Oracle StorageTek T10000 Reference Manual

Security Protocol Out Command

Key-Associated Data Descriptors List

The following key association descriptors must be provided in Key Descriptor Type
order.
Note –
• If the U-KAD descriptor is not present when Encryption Mode is enabled a 30
• In the future if this drive supports Supplemental Decryption Keys then the

TABLE 3-168 Key Association Descriptor Format

Byte 7
0
1
2 (MSB)
thru
3
4 (MSB)
thru
n
Parameter
Key Descriptor Type
Authenticated
Key Descriptor Length
220 T10000: Interface Reference Manual
byte Key Descriptor of all zeroes is used.
Host will be required to supply the U-KAD when Encryption Mode is enabled.
6 5
Reserved
Key Descriptor Length in bytes (n-3)
Value
00h = Unauthenticated key-associated data: U-KAD
01h = Authenticated key-associated data: A-KAD (not supported)
02h = Nonce value (not supported)
03h = Metadata key-associated data (not supported)
000b = Reserved
For U-KAD = Up to 001Eh bytes
Bit
4 3
Key Descriptor Type
Key Descriptor
2 1 0
Authenticated
August 2016
(LSB)
(LSB)