Cryptographic agility for data storage

A system for cryptographic agility for data storage, comprising:

• at least one memory;
• and
• at least one processor coupled to the at least one memory, the at least one processor and the at least one memory configured to:
• receive, by a cryptographic provider component, a request to perform a cryptographic operation with respect to a storage operation for a data object, wherein the cryptographic provider component is associated with an interception point between a metadata layer of a storage system and an object storage layer of the storage system;
• determine, by the cryptographic provider component, one or more attributes related to the request based on information received from the metadata layer about the data object;
• select, by the cryptographic provider component, based on the one or more attributes related to the request and one or more cryptographic policies, a cryptographic technique for handling the request from a set of possible cryptographic techniques;
• and
• store, at the object storage layer, an encrypted version of the data object based on the selected cryptographic technique.

A non-transitory computer readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• receive, by a cryptographic provider component, a request to perform a cryptographic operation with respect to a storage operation for a data object, wherein the cryptographic provider component is associated with an interception point between a metadata layer of a storage system and an object storage layer of the storage system;
• determine, by the cryptographic provider component, one or more attributes related to the request based on information received from the metadata layer about the data object;
• select, by the cryptographic provider component, based on the one or more attributes related to the request and one or more cryptographic policies, a cryptographic technique for handling the request from a set of possible cryptographic techniques;
• and
• store, at the object storage layer, an encrypted version of the data object based on the selected cryptographic technique.