NetVault Plug-in for Advanced Encryption 11.4

NetVault Backup Plug‑in for Advanced Encryption (Plug‑in for Advanced Encryption): The Plug‑in for Advanced Encryption supports AES-256 and CAST-256 algorithms to protect your data and meet the regulatory requirements.

•

CAST-256: CAST-256 uses the same elements as CAST-128, but it is adapted for a block size of 128 bits — twice the size of its 64-bit predecessor. Acceptable key sizes are 128, 160, 192, 224 and 256 bits. CAST-256 is composed of 48 rounds, sometimes described as 12 “quad-rounds”, arranged in a generalized Feistel network.

•

AES-256: Advanced Encryption Standard (AES) is an encryption standard adopted by the U.S. government. The standard consists of three block ciphers, AES-128, AES-192, and AES-256. Each AES cipher has a 128-bit block size, with key sizes of 128, 192 and 256 bits, respectively.


	NOTE: The CAST-128 and CAST-256 encryption algorithms do not comply with the requirements of the United States Federal Information Processing Standard (FIPS). These algorithms are provided for the restoration of legacy data. For FIPS compliance, use the AES-256 algorithm.

When installed on the NetVault Backup Client, these plug-ins encrypt and transfer data across the network to the backup device, where the data remains encrypted until restored to the client. If encryption is only required for secondary storage, job-level encryption offers the choice of encrypting only the secondary copy while the primary backup remains unencrypted to shrink the backup window. When using disk-based storage devices, job‑level deduplication allows you to separate deduplicated from nondeduplicated unencrypted data for optimal deduplication ratios and performance.

For a list of NetVault Backup Plug-ins that are incompatible with the Plug‑in for Standard Encryption and Plug‑in for Advanced Encryption, see the respective release notes.


	NOTE: The NetVault Backup encryption architecture only supports the Electronic Code Book (ECB) mode of operation. This support means that every data block is encrypted individually. If two or more consecutive blocks contain identical data, the encrypted forms of these blocks are also identical.

Target audience

This guide is intended for Backup Administrators and other technical personnel who are responsible for designing and implementing a backup strategy for the organization. Familiarity with encryption solutions is assumed.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

NetVault Plug-in for Advanced Encryption 11.4 - User Guide

Introducing NetVault Backup Plug-in for Advanced Encryption

About NetVault Backup Plug-in for Advanced Encryption

Target audience

Recommended additional reading