FIPS-certified encryption technology

You can use FIPS-certified encryption algorithms to encrypt your database files, or to encrypt communications for database client/server communication, web services, and client/server communication.

Federal Information Processing Standard (FIPS) 140-2 specifies requirements for encryption algorithms. The FIPS 140-2 certification program is a joint effort between the American National Institute of Standards and Technology (NIST) and the Canadian Communications Security Establishment (CSE). The Federal agencies of both Canada and the United States accept products that are certified as FIPS 104-2 conforming.

SAP Sybase IQ provides 32-bit and 64-bit FIPS-certified libraries for encryption from OpenSSL. On Windows, you must use the 64-bit libraries on a 64-bit system.

FIPS-certified RSA encryption

For a list of FIPS-certified components, see http://www.sybase.com/detail?id=1061806.

Enabling FIPS-certified encryption

Optionally, you can enforce the use of FIPS-certified encryption on the client or server with a FIPS option. When you set the FIPS option to on, all secure communications must be FIPS-certified. If someone tries to use non-FIPS RSA encryption, it is automatically upgraded to FIPS-certified RSA encryption. The FIPS option can be set on the client or server on which you want FIPS-certified encryption to be enforced. SAP Sybase IQ has a -fips command line option, and clients have a FIPS option that can be set with the Encryption connection parameter.