ISE hardening

[lilimtzrmz]

Hi there is any official documentation in which I can validate the next points:

• ISE Backup files are encrypted using AES-256 [Is the default AES-256 or 128 ?]
• ISE internal users are encrypted using Cipher Block Chaining (CBC) with AES algorithm and PKCS-5 padding mechanisms. [Is the default AES-CBC 256 or 128 ?
• ISE stores passwords and passphrases in a database that is encrypted with Key Encryption Keys (KEKs) uniquely generated for each ISE deployment [what’s the default key-size used ?]