FIPS Support in SAP Sybase IQ

SAP Sybase IQ supports Federal Information Processing Standards (FIPS)-approved encryption technology. FIPS is supported on LinuxAMD64 Server, LinuxAMD32 Client, and Windows32 Client.

The main impact of FIPS support for SAP Sybase IQ is that encryption can be nondeterministic, which is the default behavior. A nondeterministic algorithm is one in which the same input yields different output values each time. This means that when you use a key to encrypt a string, the encrypted string is different each time. The algorithm, however, can still decrypt the nondeterministic result using the key. This feature makes analyzing the encryption algorithm more difficult, and encryption more secure.

Support of FIPS is part of the separately licensed SAP Sybase IQ Advanced Security Option.

Both RSA and FIPS security are included with SAP Sybase IQ. RSA encryption requires no separate libraries, but FIPS requires optional libraries:

dbfips16.dll, libeay32.dll, msvcr90.dll, ssleay32.dll (32-bit Windows)
dbfips16.dll, libeay32.dll, msvcr100.dll, ssleay32.dll (64-bit Windows)
libssl.so and libcrypto.so (Linux)

Both security models require certificates. The rsaserver certificate is named rsaserver.id.

Licensing Requirements for FIPS Support
The Advanced Security Option (IQ_SECURITY) is required to use FIPS authentication with SAP Sybase IQ.
FIPS-certified encryption technology
You can use FIPS-certified encryption algorithms to encrypt your database files, or to encrypt communications for database client/server communication, web services, and client/server communication.

Parent topic: Advanced Security Options in SAP Sybase IQ