Data consistency in an encrypted replication environment

A system, comprising:

• a replicated data storage environment, wherein the replicated data storage environment includes data storage systems at a production site and a target site;
• and computer-executable program logic encoded in memory of one or more computers enabled to test for data consistency in the replicated data storage environment, wherein the computer-executable program logic is configured for the execution of:
• receiving a request for a data consistency check of encrypted data stored at a first storage system at the target site;
• retrieving replicated signatures from the target site, wherein the replicated signatures are based on encrypted data stored at a second storage system at the target site, wherein the encrypted data is data that was encrypted with a production encryption key maintained only at the production site;
• retrieving production signatures from the production site, wherein retrieving production signatures comprises:
• encrypting data from the production site using the production encryption key maintained only at the production site;
• and creating the production signatures based on the encrypted data from the production site;
• and determining data consistency based on an analysis of the replicated signatures and the production signatures, wherein, to accurately verify consistency between the replicated signatures and the production signatures, the production encryption key maintained only at the production site is used for to encrypt both the encrypted data from the first data storage system and the encrypted data stored at the second data storage system.

A computer program product for testing data consistency in a replicated data storage environment, wherein the replicated data storage environment includes data storage systems a production site and a target site, wherein the target site is located within a cloud storage provider, the computer program product comprising:

• a non-transitory computer readable medium encoded with computer-executable code, the code configured to enable the execution of:
• receiving a request for a data consistency check of encrypted data stored at a first data storage system at the target site;
• retrieving replicated signatures from the target site, wherein the replicated signatures are based on encrypted data stored at a second data storage system at the target site, wherein the encrypted data is data that was encrypted with a production encryption key maintained only at the production site;
• retrieving production signatures from the production site, wherein retrieving production signatures comprises:
• encrypting data from the production site using the production encryption key maintained only at the production site;
• and creating the production signatures based on the encrypted data from the production site;
• and determining data consistency based on an analysis of the replicated signatures and the production signatures, wherein, to accurately verify consistency between the replicated signatures and the production signatures, the production encryption key maintained only at the production site is used for to encrypt both the encrypted data from the first data storage system and the encrypted data stored at the second data storage system.