Encryption Strength and Coverage

Two Classes of Encryption Strength

SAS offers two classes of encryption strength:
  • If you have SAS/SECURE, you can use an industry-standard encryption algorithm such as AES. SAS/SECURE is an add-on product that is licensed separately and offers maximum protection.
  • If you don't have SAS/SECURE, you can use only the SASProprietary algorithm. SASProprietary encoding uses 32-bit keys and is appropriate for preventing accidental exposure of information. SASProprietary is licensed with Base SAS software and is available in all deployments.

Two Contexts for Encryption Coverage

SAS provides encryption in two contexts:
  • On-disk encryption protects data at rest. The emphasis is on protection of passwords, both in configuration files and in the metadata repository.
  • Over-the-wire encryption protects data while in transit. The emphasis is on protection of credentials, but you can also choose to protect all traffic in transit.