Chapter 6. Cryptography 227
6.8 Cryptographic software support
The software support levels for cryptographic functions are listed in Chapter 7.4,
“Cryptographic support” on page 285.
ISO 16609 CBC mode triple DES message
authentication code (MAC) support
-X--
AES GMAC, AES GCM, AES XTS mode, CMAC - X - -
SHA-2 (384,512), HMAC - X - -
Visa Format Preserving Encryption - X - -
AES PIN support for the German banking industry
ECDSA (192, 224, 256, 384, 521 Prime/NIST) - X - -
ECDSA (160, 192, 224, 256, 320, 384, 512 BrainPool) - X - -
ECDH (192, 224, 256, 384, 521 Prime/NIST) - X - -
ECDH (160, 192, 224, 256, 320, 384, 512 BrainPool) - X - -
PNG (Prime Number Generator) - X - -
a. To make the addition of the Crypto Express features nondisruptive, the logical partition must be predefined
with the appropriate PCI Express cryptographic adapter number. This number must be selected in its
candidate list in the partition image profile.
b. This feature is not required for Linux if only RSA clear key operations are used. DES or triple DES
encryption requires CPACF to be enabled.
c. This feature is physically present but is not used when configured as an accelerator (clear key only).
Functions or attributes CPACF CEX5C CEX5P CEX5A
To Next Page
Loading...
Need help?
General