Installation; Default Encryption State; Definitions; Cryptographic Algorithms - HP BB118BV - StorageWorks Data Protector Express Package User Manual

Installation

The Data Protector Express encryption service is installed automatically with the software. Each
implemented encryption algorithm is delivered as a separate module that is treated exactly as other agents
and drivers in the product. The modules are installed and started automatically during normal product
installation.
Encryption is turned off by default. The user enables encryption as part of a backup job's properties and,
at the same time as selecting an encryption level, provides a passphrase for the media with a minimum of
8 characters for deciphering the data. Data Protector Express stores the passphrases in the Data Protector
Express catalog. The user is able to read and append to the encrypted media without being prompted for a
passphrase as long as the media information is in the Data Protector Express catalog. In this way, Data
Protector Express provides the highest level of security for offline media.

Definitions

Passphrase – A user provided text character string that is required to access encrypted data from the
•
media.
Key – Internal numerical value that is partially derived from the passphrase and presented to the
•
cryptographic algorithm to enable the processing of the data.
Encrypt – The cryptographic process of scrambling or obscuring data using a mathematical
•
algorithm combined with key or set of keys.
Decrypt – The reverse process of encryption, deriving the original data using a complementary
•
mathematical algorithm combined with the original set of keys used with encryption.
Key Length – The length in bits for the key values used in the cryptographic algorithm.
•
Algorithm – The pre-defined mathematical process used for encoding and decoding data. This term
•
may be used interchangeably with the term encryption method.

Cryptographic Algorithms

Cryptographic algorithms are the basic components of cryptographic applications. It is important to
understand that as you increase the complexity of the encryption the information gets closer to impossible
to read and the load on your machine, for software-based encryption, will increase.
Three cryptographic algorithms are provided. These three settings provide three levels of resistance which
require progressively more CPU time to convert the same amount of data. The three options are for the
software encryption mode only.
Low – DES 56-bit
•
Medium – AES 128-bit
•
High – AES 256-bit
•