Skip to main content

Encryption APIs

The Crypto interface provides limited access to the cryptography configuration.

Trust Protection Foundation installs with two encryption keys, the default Trust Protection Foundation software encryption key, which is an AES-256 bit symmetric key generated using the Windows Data Protection API, and the Null key which is the equivalent of no encryption. You can add additional encryption keys from the Trust Protection Foundation Configuration Console, including those accessible from PKCS#11-compatible hardware security modules (HSMs).