partition ciphershow

Shows the cipher suites available for cloning operations.

Multiple cipher suite options are available for use by Cloning Protocol version 4 (CPv4). When two CPv4 partitions begin a cloning operation, they negotiate for the strongest cipher suite available to both parties. You can affect the result by disabling some suites - all are enabled by default. Use the partition cipherenable and partition cipherdisable commands.

Cloning cipher suites for CPv4 have the following format:

CPv4 <signature><key agreement<symmetric>

CPv4 ECDSA-P521-SHA-512 ECDH-P521 AES-256-KWP

In addition, CPv3 has a single cipher suite, which can be disabled (enabled by default).

Cloning cipher suite for CPv3 has the following format:

CPv3 <key transport><symmetric>

CPv3 RSA-4096-PKCS-SHA-284 AES-256-GCM

If all cipher suites are disabled, cloning (including backup) is not possible for the partition and contents.

If Partition Policy 42 is set (allow CPv1), then CPv3 and CPv4 are disabled.

Syntax

partition ciphershow

Example

lunacm:>partition ciphershow

 Cipher ID    Cipher Suite                                            Enabled
__________________________________________________________________________________

 0            CPv3 RSA-4096-PKCS-SHA-384 AES-256-GCM                  Yes

 1            CPv4 ECDSA-P521-SHA-512 ECDH-P521-SHA512 AES-256-GCM    Yes

 2            CPv4 ECDSA-P521-SHA-512 ECDH-P521-SHA512                Yes
              AES-256-CTR-SHA256-HMAC

 3            CPv4 ECDSA-BP521-SHA-512 ECDH-BP521-SHA512 AES-256-GCM  Yes

 4            CPv4 ECDSA-BP521-SHA-512 ECDH-BP521-SHA512              Yes
              AES-256-CTR-SHA256-HMAC

 5            CPv4 ECDSA-P521-SHA3-512 ECDH-P521-SHA3-512 AES-256-GCM Yes

 6            CPv4 ECDSA-P521-SHA3-512 ECDH-P521-SHA3-512             Yes
              AES-256-CTR-SHA256-HMAC

 7            CPv4 ECDSA-BP521-SHA3-512 ECDH-BP521-SHA3-512           Yes
              AES-256-GCM

 8            CPv4 ECDSA-BP521-SHA3-512 ECDH-BP521-SHA3-512           Yes
              AES-256-CTR-SHA256-HMAC



Command Result : No Error

The above list might change with time, as newer cipher suites are added, or others age out.