SQL Server Backup Encryption Details

Thanks Cathy,

Can you go into a bit more detail about encrypted backups?

In cryptography, "AES 128", "AES 256", etc. alone would only allow a single block of data to be encrypted. A block cipher mode (CBC,CTR, GCM, etc.) would be needed to encrypt multiple blocks of data. Additionally, AES 256 alone doesn't provide authentication checks, meaning the ciphertext can be tampered with. For non-authenticated block cipher modes (CBC, CTR, etc.), it's common to see HMAC being used to verify ciphertext is not modified. These details are not mentioned on the encryption backup page, and are necessary to understand how secure backups are.

This information, as you mentioned, is clearly stated on the "Data Encryption Algorithm" section for the "always encrypted" feature. It's unclear if encrypted backups provide the same level of cryptographic security, as only the ciphers ("AES 128"," AES 256", etc) are stated.

Hi @justin ，

To encrypt a backup we need to configure an encryption algorithm (supported encryption algorithms are: AES 128, AES 192, AES 256, and Triple DES) and an encryptor (a certificate or asymmetric key). It seem security for this backup. I do not know more about encryption algorithm. Please check if below blogs could help you.

Understanding AES 256 Encryption
Advanced Encryption Standard (AES)

Best regards,
Cathy

===============================================

If the response helped, do "Accept Answer" and upvote it.

Thanks Cathy,

I apologize if my question is not clear, but I am not asking about the details of the underlying cipher (AES 128, AES 192, AES 256, etc.). My question is related to which cipher block mode is being used, how IV are generated , and if backups are verified to not be modified through authenticated encryption.

As these questions are pretty technical, can you please consult with the SQL Server engineering/cryptography team for a detailed response?

Thank you.