SYMMETRIC-ENCRYPTION-ALGORITHM attribute

A character string that specifies the name of the default cryptographic algorithm to use with the ENCRYPT and DECRYPT functions. The default value is "AES_CBC_128".

Data type: CHARACTER

Access: Readable/Writeable

Applies to: SECURITY-POLICY system handle

This string is a concatenation of three character expressions that identify an algorithm, mode, and key size. For a list the supported cryptographic algorithms, see the SYMMETRIC-SUPPORT attribute reference entry.

Note: If FIPS mode is enabled and an algorithm is specified that is not approved by the National Institute of Standards and Technology (NIST), a warning message is issued.

You are responsible for generating, storing, and transporting this value.

See also

DECRYPT function, ENCRYPT function