Glossary | SkyeConnex Terminology Reference

A

AES-256-GCM

FIPS 197 + SP 800-38D authenticated encryption used for frame encryption.

AES Key Wrap (KW)

NIST SP 800-38F key-wrapping algorithm for wrapping symmetric keys.

B

Bill C-26

Canada's Critical Cyber Systems Protection Act for designated critical-infrastructure operators.

C

CLOUD Act

2018 US law extending US legal reach to data held by US-controlled cloud providers anywhere.

CloudRAID

Multi-cloud erasure-coded storage substrate.

Compelled disclosure

Government-compelled data surrender — defeated by topology in SkyeConnex.

Compliance preset pack

Pre-configured policy bundle that maps a regulatory framework to encryption, geo, retention, and audit settings.

Confidence-graded endpoint resolution

SkyeMap pin treatment that distinguishes verified vs. asserted vs. inferred location data.

Connexion

SkyeConnex's term for a connected storage-provider integration.

D

Data Encryption Key (DEK)

Per-file unique symmetric key for frame encryption.

DGSI 100-8

Canadian sovereign-cloud standard series under the Standards Council of Canada.

Duress mode

Secondary password unwraps a limited shadow scope under coercion.

E

Erasure coding

Mathematical technique splitting data into chunks that survive partial loss.

F

FedRAMP

US Federal Risk and Authorization Management Program for cloud-services security.

FIPS 140-3

NIST cryptographic-module certification standard required by US federal agencies.

Frame

~5 MB streaming chunk; the unit of encrypt-encode-scatter.

G

GDPR

EU General Data Protection Regulation; the global benchmark for personal-data privacy law.

Geo-fencing

Per-account / per-company jurisdiction policy applied at upload time.

H

Harvest now, decrypt later (HNDL)

Strategy of capturing today's encrypted data for future decryption by quantum computers.

HIPAA-BAA

Business Associate Agreement under US HIPAA; required for vendors handling PHI.

HMAC-SHA-256

FIPS 198-1 keyed message authentication; legacy verify path for signed reports.

M

ML-DSA-87

FIPS 204 post-quantum signature standard (formerly Dilithium).

ML-KEM-1024

FIPS 203 post-quantum key encapsulation, finalised August 2024.

P

PIPEDA

Canada's Personal Information Protection and Electronic Documents Act.

Provenance chain

Per-file hash chain from upload through every read; tamper-evident.

R

Ransomware

Attack class encrypting victim data and demanding payment; backup targets are the new attack surface.

Reed-Solomon RS(5,2)

Erasure code with 5 data + 2 parity shards per frame; tolerates loss of any 2 of 7.

S

Schrems II

2020 CJEU ruling invalidating EU-US Privacy Shield over US surveillance concerns.

scrypt

RFC 7914 memory-hard password-based key derivation function.

SHA-256

FIPS 180-4 cryptographic hash function; integrity backbone of SkyeConnex.

SkyeBucket

S3-compatible drop-in gateway.

SkyeGXU

Sovereign on-prem GPU embedding subsystem.

SkyeMap

Real-time sovereignty visualisation across account, folder, and file.

SOC 2 Type II

AICPA audit of service-organisation controls; the standard cloud-services attestation.

Split-Authority Decryption

M-of-N custodian quorum decryption via Shamir Secret Sharing.

T

Threat Simulator

Real-time recompute of exposure under hypothesised provider/jurisdiction loss.

U

User Master Key (UMK)

The key that wraps per-file DEKs; never in unwrapped form on the server.

Z

Zero-knowledge

The server cannot decrypt customer data; enforced cryptographically and topologically.

SkyeConnex Glossary.

A