How does backup Exec generate the AES-256 key used by tape drives for encryption?

Does anyone know the key generator used by BE to create the AES-256 keys used by LTO drives for hardware encryption?

You can read an encrypted tape across different versions of BE if you supply the same passphrase when you create the key, so clearly BE is using the same algorithm and/or salt. Does anyone know what it is?