Spotfire® Server and Environment Security

Spotfire Analyst, Spotfire Web Player, and Spotfire Automation Services

The applications in the Spotfire environment use the following encryptions.

Purpose Encryption/Hashing algorithm Comment / References
Digital signatures and encryption of sensitive data and credentials Strength and algorithm dependent on operating system version and configuration

On Windows: The Microsoft ProtectedData API (DPAPI)

On Linux (Web Player and Automation Services): ASP.NET Core Data Protection Overview

Hash calculation (not for security purposes) SHA-1 (160 bit)

The Microsoft SHA1CryptoServiceProvider

Script trust hashes SHA-512 JavaScript, custom queries, TERR, R, Python, and IronPython scripts, and other data functions are trusted based on hash value.
Hash calculation (for security purposes) SHA-256

The Microsoft SHA256CryptoServiceProvider

Hash calculation (for security purposes) SHA-512

The Microsoft SHA512CryptoServiceProvider

Encryption of data that crosses computer boundaries AES-256

The Microsoft EncryptedXml.Encrypt API