How file data is encrypted by Symantec File Share Encryption

Products

• File Share Encryption Powered by PGP Technology

Issue/Introduction

 

Resolution

Symantec File Share Encryption enables specific users to share protected files in a shared space, such as on a corporate file server or in a shared folder. Files and folders can be automatically encrypted based on policy or manually using a simple drag-and-drop interface.

File Data Encryption

• Uses AES 256 - symmetric cipher to encrypt files
• Uses EME, with a cipher mode with 512 bytes block size
   

File Share Encryption key usage

• File data encrypted to unique File Encryption Key (FEK)
• FEK is encrypted to a Directory Encryption Key (DEK)
• DEK is encrypted to each user's key