Solved

FME encryption algorithm and key lengths?

  • 13 August 2018
  • 5 replies
  • 11 views

Is there any official documentation that specifies the encryption specification used by FME desktop to store passwords (e.g. ORACLE connection string passwords)? Specifically what encryption algorithms and keys length combinations are available?

Only a few combination are acceptable to the Australian Federal Government. This is required for my organisation security section to sign off on the future use of FME.

icon

Best answer by fmelizard 14 August 2018, 02:00

View original

5 replies

Userlevel 4
Badge +13

Hi @marcusblake FME uses AES 128 bit encryption to store passwords. If you'd like the option of other encryption types then please post that at https://knowledge.safe.com/content/idea/list.html

Hi @marcusblake FME uses AES 128 bit encryption to store passwords. If you'd like the option of other encryption types then please post that at https://knowledge.safe.com/content/idea/list.html

Thanks Dan...looks like AES128 is one of the approved systems.

 

 

For your info...here's a reference to the Australian Government Information Security Manual.

 

"The approved symmetric encryption algorithms are AES128, AES192, AES256, and 3DES (page 242): https://acsc.gov.au/publications/Information_Security_Manual_2017_Controls.pdf

 

 

Badge +11

And a related question... for the same Australian Security requirements, can you please advise which algorithm is being used for FME Server "Restricted" mode security?

Badge +2

And a related question... for the same Australian Security requirements, can you please advise which algorithm is being used for FME Server "Restricted" mode security?

Hi @nic_ran

 

FME Server System Encryption uses AES algorithm with 128bit encryption.

 

Let me know if you have any further questions.
Badge +11

And a related question... for the same Australian Security requirements, can you please advise which algorithm is being used for FME Server "Restricted" mode security?

Thanks Jen.

Updating your comment to include some additional information you shared with me via email...

  • The encryption applies to projects, as well as backups.
  • We only encrypt sensitive data (not all data), and we don't encrypt fme server tokens (yet). Work is being done now to pave the way for token encryption but it won't be in 2019.0.

Reply