Release Notes › New and Changed Features in r12.1 SP1 › Encryption Libraries › Algorithms Used

Algorithms Used

Computer products that use FIPS 140-2 certified cryptographic modules in FIPS mode can use only FIPS-approved security functions. These include AES (Advanced Encryption Algorithm), SHA-1 (Secure Hash Algorithm), and higher level protocols such as TLS v1.0 as explicitly allowed in the FIPS 140-2 standard and implementation guides.

In non-FIPS mode, CA Enterprise Log Manager uses the following algorithms:

• AES 128
• Triple DES (3DES)
• SHA-1
• MD5
• SSL v3

In FIPS mode, CA Enterprise Log Manager uses the following algorithms:

• AES 128
• Triple DES (3DES)
• SHA-1
• TLS v1

CA Enterprise Log Manager uses SHA-1 as the default digest algorithm to encrypt passwords and sign server requests.

CA Enterprise Log Manager uses TLS v1.0 for communications with external LDAP directories if the LDAP connection uses TLS, communications between iTechnology components, the agent to iGateway service communication in FIPS mode, and the event channel between an agent and the logDepot service.

More information:

FIPS Support Limitations