Encryption Strength

Tenable Security Center Director uses the following default encryption for storage and communications.

Function

Encryption

Storing TNS user account passwords

SHA-512 and the PBKDF2 function

Storing user and service accounts for scan credentials, as described in Credentials.

AES-256-CBC

Storing scan data, as described in Repositories.

None

Communications between Tenable Security Center and clients (Tenable Security Center users).

The server negotiates the strongest cipher suite supported by both the server and the client.

Note: When FIPS mode is enabled, Tenable Security Center restricts TLS connections to FIPS 140-3 compliant cipher suites and key exchange groups only (NIST-approved curves: P-256, P-384, P-521).

  • TLS 1.3

    • TLS_AES_256_GCM_SHA384

    • TLS_CHACHA20_POLY1305_SHA256

    • TLS_AES_128_GCM_SHA256

  • TLS 1.2

    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

    • TLS_DHE_RSA_WITH_AES_256_CCM

    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA

For more information about strong encryption, see Configure SSL/TLS Strong Encryption.

Communications between Tenable Security Center and the Tenable product registration server.

TLS 1.2 with ECDHE-RSA-AES256-GCM-SHA384

Communications between Tenable Security Center and the Tenable plugin update server.

TLS 1.2 with ECDHE-RSA-AES256-GCM-SHA384

Communications between Tenable Security Center and:

  • Tenable Nessus or Tenable Nessus Manager

  • Tenable One Vulnerability Management

  • Tenable Network Monitor

TLS 1.3 with the strongest encryption method supported by Tenable Security Center Apache and your browser, CLI program, or API program: ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-SHA384, or ECDHE-RSA-AES256-GCM-SHA384.

Synchronizations between Tenable Security Center and Tenable One Vulnerability Management for Tenable Lumin.

TLS 1.2