To encrypt data in backups and files, Veeam Agent for Microsoft Windows employs a symmetric key encryption algorithm.
The symmetric, or single-key encryption algorithm, uses a single, common secret key to encrypt and decrypt data. Before data is sent to the target location, it is encoded with a secret key. To restore encrypted data, you must have the same secret key. Users who do not have the secret key cannot decrypt data and get access to it.
Veeam Agent for Microsoft Windows relies on a hierarchical encryption scheme. Each layer in the hierarchy encrypts the layer below with a key of specific type.
To encrypt data blocks in backup files, Veeam Agent for Microsoft Windows uses the 256-bit AES with a 256-bit key length in the CBC-mode. For more information, see Advanced Encryption Standard (AES).