Software Encryption - Revision history

Qadmin: /* FIPS 140-2 Certification */

2023-04-05T20:20:03Z

FIPS 140-2 Certification

← Older revision		Revision as of 20:20, 5 April 2023
Line 32:		Line 32:
	== FIPS 140-2 Certification ==		== FIPS 140-2 Certification ==

	QuantaStor has received a FIPS 140-2 L1 certification from NIST on March ~~22nd~~ 2022. More information on the 'OSNEXUS Crypto Library' is available at the NIST web site [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4185 here].		QuantaStor has received a FIPS 140-2 L1 certification from NIST on March 26th 2022. More information on the 'OSNEXUS Crypto Library' is available at the NIST web site [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4185 here].

Qadmin: /* OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy */

2023-04-05T20:19:46Z

OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy

← Older revision		Revision as of 20:19, 5 April 2023
Line 40:		Line 40:

	[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf Document Revision: 1.0]		[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf Document Revision: 1.0]

			=== NIST Consolidated FIPS 140-2 Certificate ===

			The OSNEXUS FIPS 140-2 certificate is available on the NIST web site here:

			[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March%202022_010422_0648_signed.pdf FIPS 140-2 Consolidated Validation Certificate]

Qadmin: /* OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy */

2023-04-05T20:17:42Z

OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy

← Older revision		Revision as of 20:17, 5 April 2023
Line 37:		Line 37:
	=== OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy ===		=== OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy ===

	The following security policy PDF document covers the internal details of the FIPS 140-2 mode of operation:		The following security policy PDF document covers the internal details of the FIPS 140-2 mode of operation and is also available on the NIST web site.

	[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf Document Revision: 1.0]		[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf Document Revision: 1.0]

Qadmin: /* OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy */

2023-04-05T20:17:25Z

OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy

← Older revision		Revision as of 20:17, 5 April 2023
Line 39:		Line 39:
	The following security policy PDF document covers the internal details of the FIPS 140-2 mode of operation:		The following security policy PDF document covers the internal details of the FIPS 140-2 mode of operation:

	[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf]		[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf Document Revision: 1.0]

Qadmin: /* FIPS 140-2 Certification */

2023-04-05T20:17:04Z

FIPS 140-2 Certification

← Older revision		Revision as of 20:17, 5 April 2023
Line 33:		Line 33:

	QuantaStor has received a FIPS 140-2 L1 certification from NIST on March 22nd 2022. More information on the 'OSNEXUS Crypto Library' is available at the NIST web site [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4185 here].		QuantaStor has received a FIPS 140-2 L1 certification from NIST on March 22nd 2022. More information on the 'OSNEXUS Crypto Library' is available at the NIST web site [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4185 here].


			=== OSNEXUS Crypto Library FIPS 140-2 Non-proprietary Security Policy ===

			The following security policy PDF document covers the internal details of the FIPS 140-2 mode of operation:

			[https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4185.pdf]

Qadmin: /* FIPS 140-2 Certification */

2023-04-05T20:13:36Z

FIPS 140-2 Certification

← Older revision		Revision as of 20:13, 5 April 2023
Line 32:		Line 32:
	== FIPS 140-2 Certification ==		== FIPS 140-2 Certification ==

	QuantaStor has a FIPS 140-2 L1 certification ~~in process with~~ NIST. More information on ~~that~~ is available [https://csrc.nist.gov/projects/cryptographic-module-validation-program/~~modules-in-process~~/~~modules-in-process-list~~ here]~~. On the NIST web site search for 'OSNEXUS Crypto Library'~~.		QuantaStor has received a FIPS 140-2 L1 certification from NIST on March 22nd 2022. More information on the 'OSNEXUS Crypto Library' is available at the NIST web site [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4185 here].

Qadmin: /* High-Availability with Encrypted Pools */

2021-08-19T17:12:26Z

High-Availability with Encrypted Pools

← Older revision		Revision as of 17:12, 19 August 2021
Line 24:		Line 24:
	== High-Availability with Encrypted Pools ==		== High-Availability with Encrypted Pools ==

	QuantaStor supported HA with encrypted pools, the only requirement is that you cannot apply a passphrase to the pool.		QuantaStor supported HA with encrypted pools, the only requirement is that you cannot apply a passphrase to the pool. With that exception HA encrypted pools operate all the same as an unencrypted pool.

	== KMIP Server Integration ==		== KMIP Server Integration ==

Qadmin: /* FIPS 140-2 Certification */

2021-08-19T17:10:51Z

FIPS 140-2 Certification

← Older revision		Revision as of 17:10, 19 August 2021
Line 32:		Line 32:
	== FIPS 140-2 Certification ==		== FIPS 140-2 Certification ==

	QuantaStor has a FIPS 140-2 L1 certification in process with NIST. More information on that is available [[https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list here]]. On the NIST web site search for 'OSNEXUS Crypto Library'.		QuantaStor has a FIPS 140-2 L1 certification in process with NIST. More information on that is available [https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list here]. On the NIST web site search for 'OSNEXUS Crypto Library'.

Qadmin: /* FIPS 140-2 Certification */

2021-08-19T17:10:40Z

FIPS 140-2 Certification

← Older revision		Revision as of 17:10, 19 August 2021
Line 32:		Line 32:
	== FIPS 140-2 Certification ==		== FIPS 140-2 Certification ==

	QuantaStor has a FIPS 140-2 L1 certification in process with NIST. More information on that is available [~~here~~ https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list]. On the NIST web site search for 'OSNEXUS Crypto Library'.		QuantaStor has a FIPS 140-2 L1 certification in process with NIST. More information on that is available [[https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list here]]. On the NIST web site search for 'OSNEXUS Crypto Library'.

Qadmin at 17:10, 19 August 2021

2021-08-19T17:10:19Z

← Older revision		Revision as of 17:10, 19 August 2021
Line 1:		Line 1:
	QuantaStor supports AES-NI accelerated software encryption and with ~~the~~ release QuantaStor 5.11 ~~supports~~ hardware encryption for Opal/Ruby compliant SSD media.		== Overview ==
			QuantaStor supports AES-NI accelerated software encryption and with an upcoming release (QuantaStor 5.11) hardware encryption will be supported for Opal/Ruby compliant SSD media. For software encryption QuantaStor uses the Linux based LUKS key management system.

	== Software vs Hardware Encryption ==		== Software vs Hardware Encryption ==

	Software encryption leverages the Linux based LUKS key management system which is hardware independent so that all media types may be used. Hardware encryption offloads the encryption to the device itself which in turn offloads the CPU and boosts overall performance. Enabling software encryption typically only reduces performance of a given Storage Pool by 15% but it can be as high as 30% depending on the CPU and number of devices.		Software encryption leverages the Linux based LUKS key management system which is hardware independent so that all media types may be used. Hardware encryption offloads the encryption to the device itself which in turn offloads the CPU and boosts overall performance. Enabling software encryption typically only reduces performance of a given Storage Pool by 15% but it can be as high as 30% depending on the CPU and number of devices. In short, if you're using a version of QuantaStor that supports hardware encryption and your media is SED Opal/Ruby compliant then hardware encryption is the best option.

	== Creating Encrypted Pools / Using Software Encryption ==		== Creating Encrypted Pools / Using Software Encryption ==
Line 31:		Line 32:
	== FIPS 140-2 Certification ==		== FIPS 140-2 Certification ==

	QuantaStor has a FIPS 140-2 L1 certification in process with NIST. Mo		QuantaStor has a FIPS 140-2 L1 certification in process with NIST. More information on that is available [here https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list]. On the NIST web site search for 'OSNEXUS Crypto Library'.