Cryptographic agility for a virtual storage area network (vsan)

A system for cryptographic agility for virtualized data storage, comprising:

• at least one memory;
• and
• at least one processor coupled to the at least one memory, the at least one processor and the at least one memory configured to:
• determine, by a hypervisor running on a host machine, one or more attributes of a virtual machine (VM) running on top of the hypervisor;
• send, by the hypervisor, to a cryptographic provider component, a request to perform cryptographic functionality with respect to one or more virtual disks associated with the VM, wherein the request comprises the one or more attributes of the VM;
• select, by the cryptographic provider component, based on the one or more attributes of the VM and one or more cryptographic policies, one or more cryptographic techniques for handling the request from a set of possible cryptographic techniques;
• and
• encrypt the one or more virtual disks in a virtual storage area network (VSAN) based on the selected one or more cryptographic techniques.

A non-transitory computer readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• determine, by a hypervisor running on a host machine, one or more attributes of a virtual machine (VM) running on top of the hypervisor;
• send, by the hypervisor, to a cryptographic provider component, a request to perform cryptographic functionality with respect to one or more virtual disks associated with the VM, wherein the request comprises the one or more attributes of the VM;
• select, by the cryptographic provider component, based on the one or more attributes of the VM and one or more cryptographic policies, one or more cryptographic techniques for handling the request from a set of possible cryptographic techniques;
• and
• encrypt the one or more virtual disks in a virtual storage area network (VSAN) based on the selected one or more cryptographic techniques.