---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Cryptographic specification overview

# Cryptographic specification overview {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

The Cryptographic specification is the component that defines aspects of your cryptographic module, including its cryptographic purpose and which encryption algorithm to use.

Cryptographic specifications can be tailored to a specified cryptographic purpose, covering both asymmetric and symmetric key-based cryptographic operations. Selection of a cryptographic purpose offers further choices, namely to a
set of supported algorithms and key length configurations.  
{#cryptographic-purpose__table_z3n_b4g_mnb__entry__3}

| Cryptographic Purpose | Algorithm | Key Information |
|-|-|-|
| Asymmetric Data Decryption | RSA | Asymmetric -- 2048-bit, 3072-bit, and 4096-bit key |
| Asymmetric Data Encryption | RSA | Asymmetric -- 2048-bit, 3072-bit, and 4096-bit key |
| Asymmetric Key Unwrapping | RSA | Asymmetric -- 2048-bit, 3072-bit, and 4096-bit key |
| Asymmetric Key Wrapping | RSA | Asymmetric -- 2048-bit, 3072-bit, and 4096-bit key |
| Signature Generation | RSA | Asymmetric -- 2048-bit, 3072-bit, and 4096-bit key |
| Signature Verification | RSA | Asymmetric -- 2048-bit, 3072-bit, and 4096-bit key |
| Symmetric Authenticity | HMAC | Symmetric -- 256-bit, 384-bit, and 512-bit key |
| Symmetric Data Encryption/Decryption\* | AES-CBC \* | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Data Encryption/Decryption\* | AES-CFB | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Data Encryption/Decryption\* | AES-OFB | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Data Encryption/Decryption\* | AES-CTR | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Data Encryption/Decryption\* | AES-GCM \*\* | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Key Wrapping/Unwrapping\* | AES-CBC \* | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Key Wrapping/Unwrapping\* | AES-CFB | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Key Wrapping/Unwrapping\* | AES-OFB | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Key Wrapping/Unwrapping\* | AES-CTR | Symmetric -- 128-bit, 192-bit, 256-bit key |
| Symmetric Key Wrapping/Unwrapping\* | AES-GCM \*\* | Symmetric -- 128-bit, 192-bit, 256-bit key |
[Tabelle : 1. Cryptographic purposes, algorithms, and key information]

{#cryptographic-purpose__table_z3n_b4g_mnb}

\* AES-CBC supports equality-preserving options.  Field Encryption Enterprise utilizes AES-CBC.

\*\* AES-GCM has built-in data integrity.

The configuration of these parameters is covered in [Create a cryptographic module](https://servicenow-prod.fluidtopics.net/Jy8yosmnoD7W9psp60zV_A "Create a cryptographic module to define the mechanisms used for cryptographic operations. After you create the module, you create a cryptographic specification, where you define an algorithm for encryption and generates a key.").