Encryption Model

Encryption Strength and Coverage

	Two Classes of Encryption Strength
	Two Contexts for Encryption Coverage

SAS offers two classes of encryption strength:

If you don't have SAS/SECURE, you can use only the SASProprietary algorithm. SASProprietary encoding uses 32-bit keys and is appropriate for preventing accidental exposure of information. SASProprietary is licensed with Base SAS software and is available in all deployments.
If you have SAS/SECURE, you can use an industry-standard encryption algorithm such as AES. SAS/SECURE is an add-on product that is licensed separately and offers maximum protection. See About SAS/SECURE.

SAS provides encryption in two contexts:

On-disk encryption protects data at rest. The emphasis is on protection of passwords, both in configuration files and in the metadata repository. See Default Settings for On-Disk Encryption.
Over-the-wire encryption protects data while in transit. The emphasis is on protection of credentials, but you can also choose to protect all traffic in transit. See Default Settings for Over-the-Wire Encryption.