Forum Discussion
OneLake Encryption Algorithm
Hi mbr98042,
Thank you for reaching out to the Microsoft Fabric Community Forum. Thank you, nilendraFabricfor your valuable input regarding the issue.
However, the specific encryption algorithms used are not detailed in the available documentation. Currently, encryption at rest using customer-managed keys is not supported, but you can submit a request for this feature on Microsoft Fabric Ideas.
Please go through the below following link for request for the feature on Microsoft Fabric Ideas.
Home
If this post helps, then please give us ‘Kudos’ and consider Accept it as a solution to help the other members find it more quickly.Best Regards.
Super UserHello mbr98042
you are right, Microsoft’s documentation for OneLake confirms encryption at rest using FIPS 140-2-compliant standards with Microsoft-managed keys.
While the specific algorithm isn’t named, FIPS 140-2 validation typically requires cryptographic modules to use NIST-approved algorithms, such as AES-256, for encryption.
FIPS 140-2 documentation emphasizes AES-256 for sensitive data protection, noting its resistance to brute-force attacks and approval for government use. For example, AES-256 is required in FIPS 140-2 Level 3 and 4 validations for environments demanding tamper resistance and zeroization
https://learn.microsoft.com/en-us/compliance/regulatory/offering-fips-140-2
hope this helps
if yes please don't forget to give kudos and accept the answer
Thanks for your response. That is similar to what I have found, but I am specifically looking for Microsoft documentation that indicates the algorithm used.