MAC levels

MAC levels determine the type of MAC key generation.

The supported generation levels are:

  • high. Uses SHA1 MAC generation on all messages.
  • medium. Uses SHA1 MAC generation for all messages greater than 20 bytes long and XOR folding on smaller messages.
  • low. Uses XOR folding on all messages.
  • off. Does not use MAC generation.

The level is prioritized to the highest value. The off entry must only be used between servers when it is guaranteed that there is a secure network connection.

All servers and client computers that transmit encrypted communication must have at least one MAC level setting in common. For example, if one database server has a level of high and medium enabled and the other database server has only low enabled, then the connection attempt fails. But if a database server has high and medium settings and the other database server has only the medium setting, the MAC generation levels support a connection.