SAS | SAS/SECURE

Products and Solutions

Industries

Solution Lines

Data Integration

Business Intelligence

Analytics

Enterprise Intelligence Platform

Government

Small to Medium Business

Product Index A-Z

SAS/SECURE^TM
Encryption services increase the security of transmissions across networks

SAS now provides encryption services to increase the security of transmissions across a network. SAS/SECURE software makes use of the cryptographic services provided by RSA's encryption algorithms and Microsoft's CryptoAPI ciphers and is subject to export regulations. A form of fixed encoding is also provided with Base SAS software.

SAS/SECURE License Availability

To provide more rigorous encryption services, SAS Institute has licensed for redistribution the encryption algorithms of RSA Data Security Inc., and provided an interface to Microsoft's CryptoAPI toolset. Export and import laws restrict SAS in licensing SAS/SECURE software to certain customers.

The United States government has granted SAS permission to export SAS/SECURE to both government and commercial users in all countries except those subject to embargo by the United States and those countries and entities to which export is otherwise prohibited by the United States. SAS may be prohibited from importing SAS/SECURE into specific countries based on the import laws of those countries. SAS/SECURE encryption services are packaged in the following forms:

SAS/SECURE supports:
- strong encryption - 1024-bit RSA keys in combination with the following algorithms:
  - RC2 using 128-bit keys
  - RC4 using 128-bit keys
  - DES using 56-bit keys
  - Triple DES using 168-bit keys
- moderate encryption - 512-bit RSA keys in combination with the following algorithms:
  - RC2 using 40-bit keys
  - RC4 using 40-bit keys
SAS/SECURE for Windows
When the enhanced cryptographic service provider is installed, this version supports:
- strong encryption — 1024-bit RSA keys in combination with the following algorithms:
  - RC2 using 128-bit keys
  - RC4 using 128-bit keys
  - DES using 56-bit keys
  - Triple DES using 168-bit keys
- moderate encryption — 512-bit RSA keys in combination with the following algorithms:
  - RC2 using 40-bit keys
  - RC4 using 40-bit keys
When only the base cryptographic service provider is installed, this version supports:
- strong encryption — 1024-bit RSA keys in combination with DES algorithm using 56-bit keys
- moderate encryption — 512-bit RSA keys in combination with the following algorithms:
  - RC2 using 40-bit keys
  - RC4 using 40-bit keys
SAS/SECURE 56 supports:
- strong encryption — 1024-bit RSA keys in combination with DES algorithm using 56-bit keys
- moderate encryption — 512-bit RSA keys in combination with the following algorithms:
  - RC2 using 40-bit keys
  - RC4 using 40-bit keys

Because SAS/CONNECT software and SAS/SHARE software were the first products to take advantage of encryption services, documentation and reference material about the services are currently distributed with those products. However, as SAS/CONNECT Driver for Java and other parts of SAS Enterprise Integration Technologies make use of encryption services, the SAS/SECURE documentation will also be included with the Web-based documentation associated with these products.

In Version 9, SAS encryption services are available with the following communications access methods on the supported hosts: TCP/IP. In Version 8, SAS encryption services are available with the following communications access methods on the supported hosts: TCP/IP, DECnet, and NetBIOS. For example, you can use encryption services to connect two UNIX hosts when using the TCP/IP access method. Also, you can connect two Windows hosts by using either the TCP/IP, the DECnet, or the NetBIOS access methods.