Does azure China's encryption algorithm comply with OSCCA certification of China? For example, key vault

Gallatin 21V 166 Reputation points
2024-05-14T08:25:01.4266667+00:00

Hi Team,

May I ask whether the encryption algorithms designed by Azure China service comply with or are certified by OSCCA algorithms in China? Similar to the documentation given by AWS, do we also meet this Chinese algorithm standard for some similar services? Thanks

https://aws.amazon.com/blogs/security/aws-kms-now-fips-140-2-level-3-what-does-this-mean-for-you/

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,149 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Akhilesh 5,720 Reputation points Microsoft Vendor
    2024-05-17T09:35:04.8633333+00:00

    Hi @Gallatin 21V

    Thank you for post!

    Microsoft Azure China is a separate cloud service operated by a local partner in China, 21Vianet, and is subject to Chinese regulations and compliance requirements.

    I would suggest to refer to the Azure China documentation or contact Azure China support to check if there is any information available on OSCCA certification.
    How ever please refer the below third-party document for more information
    http://www.atsec.cn/downloads/pdf/Chinese_Commercial_Cryptography_Scheme_and_ISO_IEC_19790.pdf

    Reference: https://support.azure.cn/en-us/support/faq/
    https://learn.microsoft.com/en-us/azure/china/concepts-support

    Hope this helps. Do let us know if you any further queries.

    Thanks,

    Akhilesh.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.