{"ref":"capability:encryption","page":"/capabilities/encryption","json":"/capabilities/encryption.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"encryption","name":"Encryption and signing","domain":"security-and-compliance","ecosystems":["abap","btp"],"universal":false,"description":"Encrypting, decrypting and signing data from application code: a document wrapped for one recipient, a payload signed so its origin can be checked, a value enciphered with a key both sides hold. Encryption of a connection, TLS, is set up in the system and is outside this concern.","short":"Encrypting, decrypting and signing data from application code","core_coverage":{"state":"core-and-community","assessed_at":"2026-09-14","what_core_does":"The SSF library for the ABAP stack creates and verifies PKCS#7 digital signatures and encrypts and decrypts documents, through SSF_KRN_SIGN, SSF_KRN_VERIFY, SSF_KRN_ENVELOPE and SSF_KRN_DEVELOPE.","where_it_stops":"At PKCS#7. The SSF page names no call for a symmetric cipher such as AES or Blowfish in a chosen mode, and none for OpenPGP.","sources":[{"url":"https://help.sap.com/saphelp_SNC700_ehp01/helpdata/en/4d/bf6f77a2c5446a86e0152f1b309db6/content.htm?no_cache=true","title":"SAP Help: Secure Store and Forward Mechanism (SSF)","checked":"2026-09-14","quote":"It supports the functions for creating and verifying digital signatures (PKCS#7), and functions for encrypting and decrypting documents."}],"relationship":"unassessed","note":"How the community cipher implementations relate to the SSF library has not been assessed."},"coverage_by_ecosystem":{"btp":{"state":"core-only","assessed_at":"2026-09-15","what_core_does":"[SAP Keystore Service](artifact:btp-keystore) holds the keys and certificates an application retrieves at runtime and uses itself to sign and verify digital signatures and to encrypt and decrypt messages.","where_it_stops":"In the Neo environment. Its one plan is listed in Neo data centres and in Moscow and Riyadh, and in the regions marked Neo the service leaves the Eligible Cloud Services List on December 31, 2028.","sources":[{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/37b6f667-324e-4816-b92f-5fc19008524e","title":"SAP Discovery Center — SAP Keystore Service","checked":"2026-09-15","quote":"Retrieve keystores easily in your applications, and use them in various cryptographic operations, such as signing and verifying of digital signatures, encrypting and decrypting messages, and for performing SSL communication."},{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/37b6f667-324e-4816-b92f-5fc19008524e","title":"SAP Discovery Center — SAP Keystore Service","checked":"2026-09-15","quote":"This Cloud Service, in the region/data center marked as \"Neo\", is being removed from the Eligible Cloud Services List on December 31, 2028 (\"Retired Service\")."}],"note":"One provider on this door and it is SAP's, so core-only is a assessment of the corpus rather than a quote from the core."}},"framing_by_ecosystem":{"btp":{"description":"On BTP the concern is where the keys are kept: the application runs the signing or the encryption in its own code and retrieves the keystore from a service instead of carrying it in its bundle."}},"history":[{"date":"2026-09-15","field":"ecosystems","from":"abap","to":"abap, btp","reason":"Widened rather than forked: signing and encrypting from application code is the same concern on BTP. Done so SAP Keystore Service, staged in intake-20260915-btp-services, can provide it; the checker read its first placement on certificate-management as the wrong concern."},{"date":"2026-09-15","field":"coverage_by_ecosystem.btp","from":null,"to":"core-only","reason":"Assessed from the Discovery Center record of SAP Keystore Service, the one BTP provider in the batch."},{"date":"2026-09-15","field":"framing_by_ecosystem.btp","from":null,"to":"where the keys are kept","reason":"On BTP the service holds the keys and the application does the operation, which is a different emphasis from the ABAP SSF library."}],"drafted_with_ai":true},"sap_delivery":{"door":"abap","all":null,"by_flavor":{"standard-abap":null,"abap-cloud":null}},"edges":{"use_cases":[],"shared_tasks":[],"related_tasks":[],"options":[{"ref":"artifact:larshp-abappgp","name":"abapPGP","json":"/artifacts/larshp-abappgp.json","ecosystem":"abap","origin_ring":"independent"},{"ref":"artifact:hhelibeb-blowfish-abap","name":"hhelibeb/blowfish-abap","json":"/artifacts/hhelibeb-blowfish-abap.json","ecosystem":"abap","origin_ring":"independent"},{"ref":"artifact:btp-keystore","name":"SAP Keystore Service","json":"/artifacts/btp-keystore.json","ecosystem":"btp","origin_ring":"sap-official"},{"ref":"artifact:sumu-ning-aes","name":"Sumu-Ning/AES","json":"/artifacts/sumu-ning-aes.json","ecosystem":"abap","origin_ring":"independent"}],"samples":[],"explained_by":[],"normative_context":[]}}