NX-OS password encryption algorithm

[raintoggi]

Hello.

I have a 6509 SUP-6 running, and the password algorithm only supports MD5.

Security audits require equipment replacement, but NX-OS's password algorithm seems to support AES-128.

( https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_5-x/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_5-x_chapter_010101.h... )

Like IOS 15.2, is SHA256 supported?

Is AES128 a strong encryption algorithm like SHA256?

(The recommendation for security auditing is SHA256.)

[Mark Malone · Accepted solution]

Hi

 AES is encryption SHA is not its a hashing algorithm , AES is an actual encryption standard

NX-OS is PCI compliant AES128 is strong 

https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

https://en.wikipedia.org/wiki/Secure_Hash_Algorithms

[raintoggi]

Hi. Mark Malone.

Thank you for your reply.

It will be a lot of help.