LiteSpeed for SQL Server 8.9.8 - Security and Compliance Guide

Encryption

Encryption is a mechanism for protecting data, which applies to it a specially designed algorithm, effectively obfuscating its content by making it different from the original.

NOTE: If running Windows 2000 to utilize the higher levels of encryption, the Windows 2000 High Encryption Pack must be installed.

LiteSpeed offers the option of encrypting in the following formats:

• 40-bit RC2

• 56-bit RC2

• 112-bit RC2

• 128-bit RC2

• 168-bit 3DES

• 128-bit RC4

• 128-bit AES

• 192-bit AES

• 256-bit AES

• 128-bit AES Microsoft implementation (MS_AES_128)
• 192-bit AES Microsoft implementation (MS_AES_192)
• 256-bit AES Microsoft implementation (MS_AES_256)

Higher levels of encryption require slightly more CPU, but generally the impact of 256-bit AES encryption on a backup running on a modern server is very low at less than 0.5% CPU utilization. We recommend for best security of a backup that 256-bit AES be used when encryption is needed.

Caution: When encrypting data, take care not to lose the encryption key; a backup cannot be restored or recovered without the original encryption key.

Related Topics

Test Optimal Backup Settings