1: What is the status of LTO Generation 4?
The availability of the Generation 4 specifications was announced
in January 2007 and it is anticipated that products will become available
throughout 2007.
2: Why is encryption being offered on the
LTO Ultrium generation 4 tape drive specification?
Protection of customer information is a
significant business issue. Losing a consumer's information can be very
expensive from an actual cost recovery and public relations perspective.
Encrypting data helps protect customer's information from many types of
compromise. The LTO Ultrium Generation 4 tape drive encryption can help address
this need.
3: What method of encryption will be used
in Generation 4 tape drives?
LTO Generation 4 uses "AES encryption
algorithm, with 256-bit keys, in GCM mode." A shorter way to say it is
"256-bit AES in GCM mode" or "AES256-GCM."
The Advanced Encryption Standard with Galois/Counter Mode of
Operation (AES+GCM) is a block cipher that provides authenticated encryption
that can achieve very high speeds in hardware with low cost and low latency. It
helps provide both data confidentiality and data integrity in a single, easy to
use construct.
4: What standards will LTO encryption
comply with or utilize?
LTO encryption complies with and/or utilizes
The Galois/Counter Mode of Operation (GCM), Advanced Encryption Standard (AES),
IEEE SPC-4 SCSI Primary Commands, IEEE SSC-3 SCSI Stream Commands and IEEE
P1619.1TM/D13, Draft Standard for Authenticated Encryption with
Length Expansion for Storage Devices.
5: Will a special cartridge be required?
Generation 4 standard or WORM tape data
cartridge are required for encryption.
6: Will encryption adversely affect drive
performance?
No, it should not. The impact of hardware
encryption on tape drive performance is expected to be typically less than 1%.
LTO Generation 4 encrypting tape drives will use GCM for
encryption/authentication, and this will allow the drives to achieve high
performance, though it will be up to each individual tape drive vendor to
select its specific GCM implementation.
7: Will encryption be offered on every
Generation 4 tape drive?
While encryption capabilities are defined in
the Generation 4 specification, encryption is an optional feature that LTO
vendors can include or not include, based on their individual product lines.
8: What will users have to do to utilize
LTO encryption?
Users will enable encryption/decryption on the
encrypting Generation 4 tape drive and provide a key.
The Generation 4 specification states that LTO
Generation 4 drives support the SCSI Security Protocol commands, which may be
used to enable encryption, and provide a key to the drive. Some vendor
implementations may enable encryption and provide a key through a proprietary
channel.
9: What happens when I insert a tape
cartridge encrypted on a Generation 4 drive into a drive that does not encrypt
or decrypt?
The drive specification is designed to know
how to handle the cartridge, and eject the cartridge.
10: How will encryption and the keys be implemented?
Encryption is performed in-hardware. Keys are
presented to the drive from an external key management system.
11: Will Generation 4 drives offer
encryption key management?
Key management is not part of the LTO Ultrium
Generation 4 specification. However, the Generation 4 format has been designed
to work with third party key management software and it is expected that key
management systems will be provided by a variety of sources that could include
LTO licensees, tape automation providers, and independent software vendors.
12: Will the whole cartridge be encrypted
or can only certain records/files on a cart be encrypted?
The LTO specifications do not limit this
capability. Depending on the key management system and application an intermix
of encrypted and unencrypted records may be stored on the same cartridge.
13: What happens if a Generation 4
encrypted cart is put in a lower generation drive (LTO-3, LTO-2 or LTO-1)?
An earlier generation drive is designed to
reject an attempt to access a Generation 4 cartridge.
14: What happens if a Generation 4
encrypted cart is put in a non-encrypting Generation 4 drive?
If a Generation 4 drive without hardware
encryption option tries to read encrypted portions of a cartridge, it will
report that the data is encrypted.
15: Could a Generation 4 drive encrypt to a
Generation 3 cartridge?
No.
16: What are the benefits of encrypting data at the drive level
vs. using an appliance in the network or software encryption?
Encrypting at the tape drive level can provide performance and
capacity advantages for administrators. Encryption at the tape drive level
enables compression before encryption, maximizing tape capacities, and allows
high performance during backup. Encrypting using an appliance device in the
network can create latencies that affect backup performance, and requires
management of the additional device. Encrypting data at tape speed helps to
avoid the need for host-based encryption of data — and the concurrent
drain on host performance.
17: Will encryption cost more?
Although Generation 4 tape drives with advanced functionality,
such as encryption, can return value to business, individual tape drive vendors
establish their own product prices.
18: Why does it make sense for users to select their own key
management system?
As an
open, standards-based format, LTO Generation 4 has been designed to work with
standard third party software allowing organizations to choose best of breed
solutions with the vendor of their choice.
19: How will LTO encryption affect LTO cartridge interchange compatibility?
LTO cartridge interchange remains unchanged. That is, an encrypted cartridge on one vendor's drive can be read on another vendor's drive given that the drive is a compatible generation, an encryption capable drive and is provided the correct encryption key. The administration of the encryption keys is typically handled by software which is outside the scope of the LTO Ultrium format specification. Encryption management software could be a factor in the interchange of an encrypted tape cartridge and should be taken into consideration when planning for encrypted cartridge interchange. Drives from different vendors that use the same software infrastructure should be interchange compatible. Drives in different locations may need compatible key management software or other less automated methods at each location to foster cartridge interchange. Please contact your system provider for more information.
|