topic Re: SAS Secure impacts in Administration and Deployment

SAS Secure impacts

Spachai — Wed, 14 Aug 2024 03:48:56 GMT

Hello Team,

I am fairly new to SAS but not to programming

We got an requirement to encrypt the dataset outside SAS 9.4. We are planning to use the python cryptography package of this encryption. specifically PyCrypto is a library that provides cryptographic functionalities for Python 2.7. We plan to use it for AES encryption, RSA public key operations, and generating 128-bit MD5 hash values.

Our platform uses a SAS product called SAS Secure for encryption for other business case.

My question is, installing pycrypto python module is a risk on our SAS environment ? Does SAS uses Operating System packages that are required for AES and MD5 encryption, Installing this pycrypto module on linux server where SAS 9.4 is also implement, would cause issues with our environment ?

Kindly clarify my queries.

Thanks in advance

Kind REgards,

Sivaraman

Re: SAS Secure impacts

AnandVyas — Thu, 15 Aug 2024 06:38:59 GMT

Hi @Spachai ,

Staring with SAS 9.4M8, SAS Foundation servers use the cryptographic libraries that are provided and installed on the operating system to provide encryption for data at rest and data in motion. SAS requires that supported cryptographic libraries be installed on the SAS Foundation operating system where SAS 9.4M8 is installed.

Reference: https://documentation.sas.com/doc/en/pgmsascdc/9.4_3.5/secref/n18y1gz1edkpzln1wuwfckm2h3hb.htm

Re: SAS Secure impacts

Sajid01 — Thu, 15 Aug 2024 14:01:28 GMT

Hello @Spachai

Your question is "We got an requirement to encrypt the dataset outside SAS 9.4. ...."
Well in IMHO it should not matter what approach one uses to encrypt data when it is outside SAS.
When the encrypted data is to be used in SAS again, Then it should be decrypted.
I recommend approaching SAS Tech Support for this issue.

Re: SAS Secure impacts

Spachai — Mon, 19 Aug 2024 07:12:14 GMT

Thanks Sajid for your clarification,

Will reach out SAS Tech Support

Kind Regards,

Siva

Re: SAS Secure impacts

Spachai — Mon, 19 Aug 2024 07:14:04 GMT

Thanks for your support.

Kind Regards,

Siva

Re: SAS Secure impacts

Kurt_Bremser — Mon, 19 Aug 2024 07:52:58 GMT

By using metadata-bound and encrypted libraries, you can meet the requirements for data at rest, with the additional benefit that everything is done transparently by SAS, with no extra steps needed for encryption/decryption.