Configuration of cryptographic parameters

This topic outlines the default out-of-the-box cryptographic settings used by Ranger KMS to generate, derive, and encrypt master keys and zone keys.

The cryptographic parameter configurations enables you to achieve the following goals:
  • Data confidentiality: By encrypting the key material using compliant and strong key derivation algorithm and transformation algorithms.
  • Data integrity: A check to protect or detect the stored encrypted bytes from being tampered during the decryption process.
  • Authenticity: To verify the sender.