![background image](http://html1.mh-extra.com/html/quantum/lto-4/lto-4_user-manual_3834212208.webp)
SCSI Commands: 44BSECURITY PROTOCOL OUT
Page
200
3.32.2.2.1
Wrapped Key Field Descriptions
Field
Bytes
Bits
Description
Parameter Set
0-1
0000h = RSA 2048
0010h = ECC 521
Label Length
2-3
Label Length specifies the length of the LABEL field in bytes.
Label 4-n
Label contains public information associated with the data
encryption key. The Label shall consist of a version byte and a
format byte (both set to 00h), followed by a Wrapped Key
Descriptor.
Wrapped Key
Length
The Wrapped Key Length field specifies the length of the Wrapped
Key field in bytes.
Wrapped Key
The Wrapped Key contains the data encrypted key.
Signature
Length
4-n
Signature Length (0000h) meaning no signature.
3.32.3
Tape Data Encryption Descriptors
The Tape Data Encryption descriptor is used to pass authenticated key-associated
data (A-KAD), unauthenticated key-associated data (U-KAD), and the Ultrium-4 key
signature (tag) between the application client and the device server. It is used in
three pages:
•
Set Data Encryption page (0010h)
•
Data Encryption Status page (0020h)
•
Next Block Encryption Status page (0021h)
The nonce value descriptor described in SSC-3 is not supported by the Quantum
LTO drive.
If the length of the descriptor sent in a Set Data Encryption page is less that the
length described below, the data will be padded to the described length by
appending bytes with a value of 00h after the LSB of the data in the descriptor
before it is written to the medium.
3.32.3.1
Unauthenticated Key-Associated Descriptor
In the Ultrium-4 format, U-KAD is up to 32 bytes in length. The U-KAD descriptor
format is shown below.
Byte
Bits
7 6 5 4 3 2 1 0
0
Key Descriptor Type
1
Reserved Authenticated
2
(MSB)
3
Key Descriptor Length (n-3)
(LSB)
4
(MSB)
n
Key Descriptor
(LSB)
3.32.3.1.1
Unauthenticated Key-Associated Descriptor Field Descriptions
Summary of Contents for LTO 4
Page 1: ......