Quantum LTO 3 User Manual page 200

SCSI Commands: 43BSECURITY PROTOCOL IN
Field Bytes Bits
ENCRYPTION 12 0-3
STATUS
COMPRESSI 12 4-7
ON STATUS
ALGORITHM 13
INDEX
The KEY-ASSOCIATED DATA DESCRIPTORS List may contain any of the following descriptors,
depending upon the current decryption mode and whether the currently-loaded volume supports
encryption.
Authenticated
Key-
Associated
Data
Descriptor
Unauthenticat
ed Key-
Associated
Data
Descriptor
Metadata Key- 68
Associated bytes
Data
Descriptor
Description
0h = The device server is incapable of determining if the logical
object referenced by the LOGICAL OBJECT NUMBER field
has been encrypted.
1h = The device server is capable of determining if the logical
object referenced by the LOGICAL OBJECT NUMBER field
has been encrypted, but is not able to at this time. Possible
reasons are:
a) the next logical block has not yet been read into the buffer;
b) there was an error reading the next logical block; or
c) there are no more logical blocks (i.e., end-of-data).
2h = The device server has determined that the logical object
referenced by the LOGICAL OBJECT NUMBER field is not a
logical block, e.g., a filemark.
3h = The device server has determined that the logical object
referenced by the LOGICAL OBJECT NUMBER field is not
encrypted.
4h = The device server has determined that the logical object
referenced by the LOGICAL OBJECT NUMBER field is
encrypted by an algorithm that is not supported by this device
server. The values in the KEY-ASSOCIATED DATA
DESCRIPTORS field contain information pertaining to the
encrypted block.
5h = The device server has determined that the logical object
referenced by the LOGICAL OBJECT NUMBER field is
encrypted by an algorithm that is supported by this device
server. The values in the ALGORITHM INDEX and KEY-
ASSOCIATED DATA DESCRIPTORS fields contain
information pertaining to the encrypted block.
6h = The device server has determined that the logical object
referenced by the LOGICAL OBJECT NUMBER field is
encrypted by an algorithm that is supported by this device
server, but the device server is either not enabled to decrypt or
does not have the correct key value to decrypt the encrypted
block.
0h = The device server is incapable of determining if the logical
object referenced by the LOGICAL OBJECT NUMBER field
has been compressed.
00h = AES-256/GCM.
KEY-ASSOCIATED DATA DESCRIPTORS
This descriptor is returned for any value of Decryption Mode and if
the currently-loaded volume supports encryption.
Contents of the authenticated key-associated data (A-KAD)
associated with the next logical block, if any. The length is up to
twelve bytes.
This descriptor is returned for any value of Decryption Mode and if
the currently-loaded volume supports encryption.
Contents of the unauthenticated key-associated data (U-KAD)
associated with the next logical block, if any. The length is up to
32 bytes.
This descriptor is returned if the Decryption Mode is RAW.
Contents of the metadata key-associated data (M-KAD)
associated with the next logical block.
Page 192