Encryption Strength

Tenable.sc uses the following default encryption for storage and communications.

Function Encryption
Storing TNS user account passwords SHA-512 and the PBKDF2 function
Storing user and service accounts for scan credentials, as described in Credentials. AES-256-CBC
Storing scan data, as described in Repositories. None

Communications between Tenable.sc and clients (Tenable.sc users).

SSL/TLS 1.2 with the strongest encryption method supported by Tenable.sc Apache and your browser, CLI program, or API program: EECDH+AESGCM, EDH+AESGCM, AES256+EECDH, or AES256+EDH.

For more information about strong encryption, see Configure SSL/TLS Strong Encryption.
Communications between Tenable.sc and the Tenable product registration server. SSL/TLS 1.2 with ECDHE-RSA-AES256-GCM-SHA384
Communications between Tenable.sc and the Tenable plugin update server. SSL/TLS 1.2 with ECDHE-RSA-AES256-GCM-SHA384

Communications between Tenable.sc and:

  • Nessus or Nessus Manager
  • Tenable.io
  • NNM
  • LCE
 SSL/TLS 1.2 with the strongest encryption method supported by Tenable.sc Apache and your browser, CLI program, or API program: ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-SHA384, or ECDHE-RSA-AES256-GCM-SHA384.
Synchronizations between Tenable.sc and Tenable.io for Lumin. SSL/TLS 1.2