OneLake Encryption Algorithm

[mbr98042]

Is there any Microsoft documentation that specifies the encryption algorithm used to protect OneLake data at rest? I can only find references on third party sites that it is AES-256. Nothing that I am finding on Learn, the Fabric security white paper, etc. specifically states it is AES-256 (or what it uses). Only that it is FIPS 140-2 compliant.

[v-kpoloju-msft · Accepted solution]

Hi @mbr98042,

Thank you for reaching out to the Microsoft Fabric Community Forum. Thank you, @nilendraFabricfor your valuable input regarding the issue.

However, the specific encryption algorithms used are not detailed in the available documentation. Currently, encryption at rest using customer-managed keys is not supported, but you can submit a request for this feature on Microsoft Fabric Ideas.
Please go through the below following link for request for the feature on Microsoft Fabric Ideas.
Home

If this post helps, then please give us ‘Kudos’ and consider Accept it as a solution to help the other members find it more quickly.

Best Regards.

[v-kpoloju-msft]

Hi @mbr98042,

May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.

Thank you.

[v-kpoloju-msft]

Hi @mbr98042,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.

Thank you.

[v-kpoloju-msft]

Hi @mbr98042,

I hope this information is helpful. Please let me know if you have any further questions or if you'd like to discuss this further. If this answers your question, please Accept it as a solution and give it a 'Kudos' so others can find it easily.

Thank you.

[nilendraFabric]

Hello @mbr98042 

you are right, Microsoft’s documentation for OneLake confirms encryption at rest using FIPS 140-2-compliant standards with Microsoft-managed keys.

While the specific algorithm isn’t named, FIPS 140-2 validation typically requires cryptographic modules to use NIST-approved algorithms, such as AES-256, for encryption.

FIPS 140-2 documentation emphasizes AES-256 for sensitive data protection, noting its resistance to brute-force attacks and approval for government use. For example, AES-256 is required in FIPS 140-2 Level 3 and 4 validations for environments demanding tamper resistance and zeroization

https://learn.microsoft.com/en-us/compliance/regulatory/offering-fips-140-2

https://www.kiteworks.com/regulatory-compliance/mastering-fips-essential-guide-for-it-and-cybersecur...

hope this helps 

if yes please don't forget to give kudos and accept the answer 

[mbr98042]

Thanks for your response. That is similar to what I have found, but I am specifically looking for Microsoft documentation that indicates the algorithm used.