{ DESCBC (default) }
       /KEY_ALGORITHM= { AESmmmkkk        }
                       {                  }

    Where mmm is the mode CBC, ECB, CFB, or OFB; and kkk is 128,
    192, or 256 bits. Note that /KEY_ALGORITHM=AES is a shortcut for
    specifying AESCBC128.

    The command uses this key algorithm with the key you supply
    to encrypt the randomly generated data encryption key and the
    initialization vector stored within the file.

    When specifying an AES algorithm, specify both /KEY and /DATA
    qualifiers and use an AES created key.