Oracle StorageTek T10000

Security Protocol Out Command
220 T10000: Interface Reference Manual August 2016
Key-Associated Data Descriptors List
The following key association descriptors must be provided in Key Descriptor Type
order.
Note –
• If the U-KAD descriptor is not present when Encryption Mode is enabled a 30
byte Key Descriptor of all zeroes is used.
• In the future if this drive supports Supplemental Decryption Keys then the
Host will be required to supply the U-KAD when Encryption Mode is enabled.
TABLE 3-168 Key Association Descriptor Format
Byte
Bit
76543210
0 Key Descriptor Type
1 Reserved Authenticated
2
thru
3
(MSB)
Key Descriptor Length in bytes (n-3)
(LSB)
4
thru
n
(MSB)
Key Descriptor
(LSB)
Parameter Value
Key Descriptor Type 00h = Unauthenticated key-associated data: U-KAD
01h = Authenticated key-associated data: A-KAD (not supported)
02h = Nonce value (not supported)
03h = Metadata key-associated data (not supported)
Authenticated 000b = Reserved
Key Descriptor Length For U-KAD = Up to 001Eh bytes