Repository files navigation

SCSI Tape Encryption Manager - Manages hardware encryption on LTO tape drives (starting with generation 4).Program should work on any other SCSI security protocol (SSP) capable tape drives.Supports key change auditing and key descriptors (uKAD).

• SCSI hardware-based encryption management
• Supports Linux and FreeBSD
• Supports most SSP compliant devices, such as LTO-4 tape drives
• Key change audit logging
• AES Encryption
• Key Descriptor Management

git clone https://github.com/scsitape/stenc.gitcd stenc/autoreconf --install./autogen.sh && ./configure  make check     # optionally run the catch testing frameworkmake

$ stenc -f /dev/nst0Status for /dev/nst0 (TANDBERG LTO-6 HH 3579)--------------------------------------------------Reading:                         Decrypting (AES-256-GCM-128)Writing:                         Encrypting (AES-256-GCM-128)                                 Protecting from raw readKey instance counter:            1Drive key desc. (U-KAD):         mykey20170113Supported algorithms:1    AES-256-GCM-128     Key descriptors allowed, maximum 32 bytes     Raw decryption mode allowed, raw read enabled by default

AIX support was suspended on 2022-05-08 until we have contributors who can develop and test the code on AIX.

Program copyright 2012-2022 contributing authors.

This program is free software; you can redistribute it and/or modifyit under the terms of the GNU General Public License as published bythe Free Software Foundation; version 2 of the License.

This program is distributed in the hope that it will be useful,but WITHOUT ANY WARRANTY; without even the implied warranty ofMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See theGNU General Public License for more details.

IBM Tape Library Guide for Open SystemsISBN-13: 9780738458342http://www.redbooks.ibm.com/abstracts/sg245946.html?Open

SCSI-Programming-HOWTOhttps://tldp.org/HOWTO/archived/SCSI-Programming-HOWTO/SCSI-Programming-HOWTO-9.html