--- title: What’s Your Encryption Description? description: What's your encryption description? Read this blog to find out. image: https://blog.goosmannlaw.com/hubfs/45555673_s.jpg --- [![Goosman Lawfirm](https://blog.goosmannlaw.com/hs-fs/hubfs/Goosmannlaw%20October2017/images/Goosmann_Law_Firm_logo_4C-white.png?width=1250&name=Goosmann_Law_Firm_logo_4C-white.png "Goosman Lawfirm")](http://goosmannlaw.com/) - [COVID-19 Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - Our Team - [Attorneys](https://goosmannlaw.com/attorneys/) - [Non-Attorney Staff](https://http://goosmannlaw.com/non-attorney-staff/) - Practices & Industries - [Practices](https://goosmannlaw.com/practices/) - [Banking & Finance](https://goosmannlaw.com/banking-finance/) - [Bankruptcy, Restructuring & Workouts](https://goosmannlaw.com/bankruptcy-restructuring-workouts/) - [Business](https://goosmannlaw.com/business/) - [Divorce & Family Law](https://goosmannlaw.com/divorce-family-law/) - [Employment](https://goosmannlaw.com/employment-law/) - [Environmental, Health & Safety](https://goosmannlaw.com/health-safety/) - [Estate Planning](https://trustlawcounsel.com) - [Gestational Surrogacy & Adoption](https://goosmannlaw.com/gestational-surrogacy-adoption/) - [International Law](http://goosmannlaw.com/international-law/) - [Litigation / Trial Law](https://goosmannlaw.com/litigation-trial-law/) - [Local Counsel](https://http://goosmannlaw.com/local-counsel/) - [Mergers & Acquisitions](https://goosmannlaw.com/mergers-acquisitions/) - [Rapid Response](https://goosmannlaw.com/rapid-response/) - [Industries](https://goosmannlaw.com/industries/) - [Agribusiness & Cooperatives](https://goosmannlaw.com/agribusiness-cooperatives/) - [Construction](https://goosmannlaw.com/construction/) - [Cyber Law and Telecommunications](https://goosmannlaw.com/cyber-law/) - [Education](https://goosmannlaw.com/education/) - [Health Care](https://goosmannlaw.com/health-care/) - [Manufacturing](https://goosmannlaw.com/manufacturing-law/) - [Multifamily Housing](https://goosmannlaw.com/multifamily-housing-law/) - [Non-Profit & Tax Exempt Organizations](https://goosmannlaw.com/non-profit-law/) - [Real Estate](https://goosmannlaw.com/real-estate/) - [Transportation](https://goosmannlaw.com/transportation/) - [Tribal](https://goosmannlaw.com/tribal/) - Our Firm - [Firm News](https://blog.goosmannlaw.com/firm-news) - Careers - [Attorneys](https://goosmannlaw.com/careers/attorneys/) - [Administration](https://goosmannlaw.com/careers/administration/) - [Internships](https://goosmannlaw.com/careers/internships/) - [Client Testimonials and Results](https://goosmannlaw.com/our-firm/client-testimonials-and-results/) - [Culture, Diversity, and Community](https://http://goosmannlaw.com/our-firm/culture-diversity-and-community/) - [Women-Owned Business](https://goosmannlaw.com/our-firm/women-owned-business/) - [Associations & Memberships](https://goosmannlaw.com/associations-memberships/) - [Firm History](https://goosmannlaw.com/firm-history/) - Blogs - [CEO Law Review](https://blog.goosmannlaw.com/ceo-on-your-side) - [Construction Lawyer](https://blog.goosmannlaw.com/construction-lawyer-on-your-side) - [Cyber Lawyer](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side) - [Deal Maker](https://blog.goosmannlaw.com/deal-maker-on-your-side) - [Divorce Docket](https://blog.goosmannlaw.com/divorce-lawyer-on-your-side) - [Food for Thought](https://blog.goosmannlaw.com/agricultural-lawyer-on-your-side) - [HR Legal Insider](https://blog.goosmannlaw.com/human-resources-on-your-side) - [Law Doc](https://blog.goosmannlaw.com/health-lawyer-on-your-side) - [Paralegal Review](https://blog.goosmannlaw.com/paralegal-review/) - [Real Estate Lawyer](https://blog.goosmannlaw.com/real-estate-lawyer-on-your-side) - [Risky Business](https://blog.goosmannlaw.com/risk-manager-on-your-side) - [The Banker’s Suit](https://blog.goosmannlaw.com/banking-lawyer-on-you-side) - [Trial Law Review](https://blog.goosmannlaw.com/trial-lawyer-on-you-side) - [Trust Law Counsel](https://blog.goosmannlaw.com/estate-planning-laywer-on-your-side) - Resources - [COVID-19 Resource Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - [Podcast](http://podcast.goosmannlaw.com/) - [Videos](https://goosmannlaw.com/videos/) - [FREE eBooks & Tools](https://goosmannlaw.com/free-ebooks-tools/) - Contact Us - [Office Locations](https://goosmannlaw.com/locations/) - [Sioux City Law Firm](https://goosmannlaw.com/locations/sioux-city-law-firm/) - [Sioux Falls Law Firm](https://goosmannlaw.com/locations/sioux-falls-law-firm/) - [Omaha Law Firm](https://goosmannlaw.com/locations/omaha-law-firm/) - [Spirit Lake & Spencer Law Firms](https://goosmannlaw.com/locations/spirit-lake-and-spencer-law-firm/) - [Real Estate Closings Office](https://goosmannlaw.com/locations/real-estate-closing-office/) - [Submit a Testimonial](https://goosmannlaw.com/submit-a-testimonial/) - [Sign Up for Our Newsletter](https://goosmannlaw.com/sign-up-for-our-newsletter/) - [Pay Online](https://goosmannlaw.com/pay-online-3/) - [  (855) 843-4531](tel:855-843-4531) ![](https://blog.goosmannlaw.com/hubfs/Blog_Images/Lockbox%20Lawyer/close-button.png) [tel:855-THE-GLF1](tel:855-THE-GLF1) # [What’s Your Encryption Description?](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/whats-your-encryption-description) By [Goosmann Law Team](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team)   |  3, October 2018 [READ NOW](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/whats-your-encryption-description) [Read Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/whats-your-encryption-description#article) [![](https://blog.goosmannlaw.com/hs-fs/hubfs/Logos/Logo1.jpg?width=60&name=Logo1.jpg)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team) [Goosmann Law Team](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team) ## Since South Dakota passed their data breach notification law earlier this year I have been looking and reviewing the breach notification laws across the US. All 50 states now have enacted such legislation, but over the course of the years not much progress has been made in one important aspect of the statutes: there is no consistent definition of the encryption standard across the states that have either: defined a safe harbor for encrypted data; or attempted to define encryption. Several states include a safe harbor for encrypted data to the notification requirements, such as “if any of the data elements are not encrypted, redacted, or otherwise altered by any method or technology in such a manner that the name or data elements are unreadable”(1) or “when the name and data elements are not encrypted”(2) . Many more states include encryption in the definition of breach such as, “\[b\]reach of the security of the system means the unauthorized acquisition of unencrypted computerized data that compromises the security, confidentiality, or integrity of personal information maintained by an individual or a commercial entity.”(3)  But, only two states define the encryption standard in an objective manner to provide concrete guidance to businesses. There are many ways in which computers can manipulate and encrypt data and  computers can very quickly and efficiently incorporate a number of different computer techniques. But, however the data is altered, encryption techniques use a key - either an asymmetric or symmetric key - to encrypt data. Symmetric encryption techniques mean the same key is used to both encrypt and decrypt the message. Asymmetric techniques involve two different keys – one to encrypt the data and one to decrypt the data.  The strength of any encryption technique is based on two things – the size of the key used to encrypt the data (the longer the better) and the number iterations the encryption algorithm is performed on the data. The techniques and the keys have been become more and more complicated over the years as computers have evolved.  Newer and faster computers have created a need to continuously update and improve encryption techniques. The encryption techniques of 20 years ago are now considered obsolete.  As an example of obsolescence, an early form of computerized data encryption was the Data Encryption Standard (DES). DES used a 56-bit encryption key and performed 16 iterations of encryption.  DES was fantastic it its day, but in 1998 a computer was created to perform a brute force attack against DES and it was successful.  Now, most modern computers could attack a DES encrypted system.   National Institute of Science and Technology (NIST) is the government organization which standards for encryption. The current encryption techniques recommended by NIST require a minimum key length of 128-bit. There are even algorithms which use keys up to a key length 1024-bit, but 128-bit key is the recommended minimum. Of the two states that define how encryption is to be completed, one defines the encryption key to be used (128-bit, Massachusetts (4)) and one refers to the standards set by NIST (Washington (5)). Of the other 48 states, several refer to “transformation of data through the use of an algorithmic process into a form in which there is low probability”(6) of reading or decrypting the data, but the vast majority do not even attempt to define what encryption standard to use. And what may be considered a low probability in one jurisdiction may not be accepted in another jurisdiction. Every company needs to review the encryption standard they use to protect their data and the data of their customers to ensure adequate protection. The algorithm used should at least be a 128-bit key and should adhere to the minimum NIST requirements whether or not the statute requires it. All encryption is not equal and courts may not accept your definition of encryption even if your state does not have a minimum encryption standard. To review your encryption standard, contacts a Sioux Falls, Sioux City, or Omaha lawyer today. Endnotes: Mo. Rev. Stat. § 407.1500 (9) Neb. Rev. Stat. §87-802 (3) Neb. Rev. Stat. §87-802(1) Massachusetts Gen Laws Ch. 93H, §1(a) Was. Rev. Code §19.255.010(7) “encrypted in a manner that meets or exceeds the national institute of standards and technology (NIST) standard or is otherwise modified so that the personal information is rendered unreadable, unusable, or undecipherable by an unauthorized person.” 1. Va. Code §46A-2A-101(3)  [![CONTACT US](https://no-cache.hubspot.com/cta/default/489404/ec70fe7d-ad02-40c5-93ba-4800375ab6e9.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/ec70fe7d-ad02-40c5-93ba-4800375ab6e9) ### Select Different CTA for each Post from Blog Editor [![New Call-to-action](https://no-cache.hubspot.com/cta/default/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422) ### Subscribe Our Blog Thanks for submission!! - Recent - Popular ### Posts by Topic - [Cyber Law (43)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law) - [cyber (7)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber) - [cybersecurity (5)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cybersecurity) - [Business News and Insights (4)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/business-news-and-insights) - [Cyber Law Trends (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law-trends) - [Firm News (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/firm-news) - [Media Law and Technology & Science (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/media-law-and-technology-science) - [CEO (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/ceo) - [Communications Law (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/communications-law) - [Cyber scams (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-scams) - [EMV Credit Cards (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/emv-credit-cards) - [HR Legal Insider (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/hr-legal-insider) - [CFAA (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cfaa) - [Communications Decency Act (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/communications-decency-act) - [Cyber Legacy (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-legacy) - [DNA (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/dna) - [Employee Recruiting (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/employee-recruiting) - [Employment News and Insights (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/employment-news-and-insights) - [IRS (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs) - [IRS scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs-scam) - [IRS scam Sioux City (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs-scam-sioux-city) - [Identity Theft (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/identity-theft) - [Ransomware (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/ransomware) - [Sioux City IRS scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/sioux-city-irs-scam) - [South Dakota (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/south-dakota) - [data breach (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/data-breach) - [scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/scam) DISCLAIMER: The information in this blog post (“post”) is provided for general informational purposes only, and may not reflect the current law in your jurisdiction. By visiting this website, blog, or post you understand that there is no attorney client relationship between you and the Goosmann Law Firm attorneys and website publisher. No information contained in this post should be construed as legal advice from Goosmann Law Firm, PLC, or the individual author, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this post should act or refrain from acting on the basis of any information included in, or accessible through, this Post without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue from a lawyer licensed in the recipient’s state, country or other appropriate licensing jurisdiction. #### Let Us Know What You Thought about this Post. Put your Comment Below. [Previous Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/the-true-value-of-a-penetration-test-legal-liabilities) ##### [The True Value of a Penetration Test: Legal Liabilities](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/the-true-value-of-a-penetration-test-legal-liabilities) [Next Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/how-to-avoid-a-phishing-trip-employees-and-targeted-email-scams) ##### [How to Avoid a Phishing Trip: Employees and Targeted Email Scams](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/how-to-avoid-a-phishing-trip-employees-and-targeted-email-scams) ### Contact Info **Sioux City Location** P. 712-226-4000 F. (712) 224-4517 **Sioux Falls Location** P. (605) 371-2000 F. (605) 275-2039 **Omaha Location** P. (402) 280-7648 F. (402) 505-3967 --- [Disclaimer](http://goosmannlaw.com/list-all-blogs/disclaimer/) | [Privacy Policy](http://goosmannlaw.com/privacy-policy/) ### Locations **Sioux City Location** 410 5th Street Sioux City, IA 51101 **Sioux Falls Location** 5010 S. Minnesota Avenue, Suite 100 Sioux Falls, SD 57108 **Omaha Location** Advent Building 17838 Burke Street, Suite 250 Omaha, NE 68118 ![Goosmann](https://blog.goosmannlaw.com/hs-fs/hubfs/Blog_Images/Lockbox%20Lawyer/goosmann-white.png?width=250&name=goosmann-white.png "Goosmann") Goosmann Law Firm is a FULL SERVICE LAW FIRM with locations in Sioux City, Iowa, Sioux Falls, South Dakota, and Omaha, Nebraska. Goosmann Law attorneys are licensed to practice in Iowa, Nebraska, South Dakota, and North Dakota. Their attorney team's practices and industries include but are not limited to Agribusiness and Cooperatives, Banking and Finance, Bankruptcy, Restructuring and Workouts, Business, Construction, Cyber Law and Telecommunications, Divorce and Family Law, Education, Employment, Environmental Health and Safety, Gestational Surrogacy and Adoption, Health Care, Litigation and Trial Law, Manufacturing, Mergers and Acquisitions, Municipal, Nonprofit and Tax Exempt Organizations, Real Estate, and Transportation, Tribal, Wills, Trusts, Estate Planning, and Probate Law. Goosmann © Copyright 2017