IBM Computer Hardware 2 Manual de usuario Pagina 413
- Pagina / 508
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
CCA Release 2.54
Master Key Shares Data Formats
Master key shares, and potentially other information to be “cloned” from one
Coprocessor to another Coprocessor are packed into a data structure as described
in Figure B-46.
Figure B-46. Cloning Information Token Data Structure
Offset
(Bytes)
Length
(Bytes)
Description
000 001 X'1D', token identifier
001 001 X'00', Version
002 002 Length of the cloning information token
004 004 Reserved, binary zero
008 004 Cloning-share index number, i; 1≤i≤15
012 016 Origin-node Environment Identifier, EID
028 008 Origin-Coprocessor serial number
036 xxx Cloning information TLV's:
Master key share
Signature
And one to seven bytes of padding to ensure that length 'xxx' is a multiple
of eight bytes.
Note: The information from offset 036 through 035+xxx is triple encrypted with a triple-length DES
key using the EDE3 encryption process, see “Triple-DES Ciphering Algorithms” on page D-10.
Figure B-47. Master Key Share TLV
Offset
(Bytes)
Length
(Bytes)
Description
000 001 X'01', master key share identifier
001 001 X'00', Version
002 002 X'001D', length of the TLV
004 001 Index value, i, binary
005 024 Master-key share
Figure B-48. Cloning Information Signature TLV
Offset
(Bytes)
Length
(Bytes)
Description
000 001 X'45', Signature Subsection Header
001 001 X'00', Version
002 002 Subsection length, 70+sss
004 001 Hashing algorithm identifier; X'01' signifies use of the SHA-1 hashing
algorithm.
005 001 Signature formatting identifier; X'01' signifies use of the ISO-9796 process.
006 064 Signature-key identifier; the key label of the key used to generate the
signature.
070 sss The signature field.
The signature is calculated on data that begins with the Cloning Information
Token Data Structure identifier (X'1D') through the byte immediately
preceding this signature field.
Appendix B. Data Structures B-41
- Release 2.54 1
- IBM iSeries PCICC Feature 1
- Contents 3
- CCA Release 2.54 10
- Trademarks 13
- About This Publication 15
- Release 2.52 16
- Release 2.51 16
- Release 2.41 17
- About This Publication xix 19
- Organization 22
- Related Publications 23
- Cryptography Publications 23
- Overlapped Processing 31
- CCA Access-Control 40
- Understanding Access Control 40
- Role-Based Access Control 40
- Understanding Roles 41
- Understanding Profiles 42
- Logging On and Logging Off 45
- Multi-Coprocessor Capability 48
- Establishing Master Keys 51
- Logon_Control (CSUALCT) 90
- Master_Key_Process (CSNBMKP) 97
- Related Information 100
- Random_Number_Tests (CSUARNT) 102
- Restrictions 102
- Parameters 102
- Required Commands 103
- Chapter 3. RSA Key-Management 105
- Key Generation 106
- Key Import 108
- Using the PKA Keys 109
- Extracting a Public Key 110
- PKA_Key_Generate (CSNDPKG) 111
- PKA_Key_Import (CSNDPKI) 115
- PKA_Key_Token_Build (CSNDPKB) 118
- CCA Release 2.54 122
- Digital Signatures 136
- MDC_Generate (CSNBMDG) 144
- One_Way_Hash (CSNBOWH) 147
- Chapter 5. DES Key-Management 151
- Control Vectors 154
- Key Types 155
- Key-Usage Restrictions 156
- Key Tokens 162
- Key Labels 164
- Key Identifiers 164
- Installing and Verifying Keys 165
- Generating Keys 166
- Diversifying Keys 169
- Storing Keys in Key Storage 170
- Security Precautions 171
- Clear_Key_Import (CSNBCKI) 172
- Data_Key_Export (CSNBDKX) 181
- Data_Key_Import (CSNBDKM) 183
- Key_Export (CSNBKEX) 192
- Key_Generate (CSNBKGN) 194
- Key-Length Specification 199
- Key_Import (CSNBKIM) 201
- CCA Release 2.54 Key_Import 203
- Key_Part_Import (CSNBKPI) 204
- Key_Test (CSNBKYT) 208
- Key_Token_Build (CSNBKTB) 211
- Key_Token_Change (CSNBKTC) 214
- Key_Token_Parse (CSNBKTP) 216
- Key_Translate (CSNBKTR) 219
- PKA_Decrypt (CSNDPKD) 223
- PKA_Encrypt (CSNDPKE) 225
- PKA_Encrypt CCA Release 2.54 226
- Ensuring Data Confidentiality 243
- Ensuring Data Integrity 245
- Decipher (CSNBDEC) 247
- Decipher CCA Release 2.54 248
- Encipher (CSNBENC) 250
- CCA Release 2.54 Encipher 251
- MAC_Generate (CSNBMGN) 253
- MAC_Verify (CSNBMVR) 256
- Chapter 7. Key-Storage Verbs 259
- Key-Label Content 260
- DES_Key_Record_List (CSNBKRL) 265
- PKA_Key_Record_List (CSNDKRL) 273
- PKA_Key_Record_Read (CSNDKRR) 275
- Retained_Key_List (CSNDRKL) 280
- Processing Financial PINs 284
- PIN-Verb Summary 287
- Providing Security for PINs 288
- PIN Security 289
- PIN-Calculation Methods 290
- Data_Array 290
- PIN Profile 292
- PIN-Extraction Methods 294
- Working With EMV Smart Cards 295
- Clear_PIN_Encrypt (CSNBCPE) 297
- Clear_PIN_Generate (CSNBPGN) 300
- CVV_Generate (CSNBCSG) 309
- CVV_Verify (CSNBCSV) 312
- PIN_Change/Unblock (CSNBPCU) 334
- SET_Block_Compose (CSNDSBC) 348
- SET_Block_Decompose (CSNDSBD) 352
- Return Codes 361
- Reason Codes 361
- Return Code 0 362
- Return Code 4 363
- Return Code 8 364
- Return Code 12 370
- Return Code 16 371
- Appendix B. Data Structures 373
- Null Key-Token 374
- DES Key-Tokens 375
- External DES Key-Token 377
- RSA PKA Key-Tokens 378
- RSA Key-Token Sections 379
- PKA Key-Token Integrity 380
- Chaining-Vector Records 392
- Key-Storage Records 393
- Key_Record_List Data Set 397
- Role Structure 401
- Aggregate Role Structure 402
- Access-Control-Point List 402
- Default Role Contents 403
- Profile Structure 404
- Aggregate Profile Structure 405
- Authentication Data Structure 405
- User Profile 408
- Role Data Structure 411
- Aggregate Role Data Structure 412
- Function Control Vector 414
- Encryption 417
- Changing Control Vectors 432
- Mask Array Preparation 436
- Notation Used in Calculations 444
- MDC-1 Calculation 444
- MDC-2 Calculation 445
- MDC-4 Calculation 445
- Ciphering Methods 445
- ANSI X9.23 447
- MAC Calculation Methods 453
- RSA Key-Pair Generation 455
- Access-Control Algorithms 456
- ANSI X9.31 Hash Format 459
- PKCS #1 Formats 459
- PIN-Calculation Methods 462
- PIN-Block Formats 469
- 3624 PIN-Block Format 469
- ISO-0 PIN-Block Format 470
- ISO-1 PIN-Block Format 471
- ISO-2 PIN-Block Format 472
- UKPT Calculation Methods 473
- CVV and CVC Method 476
- PIN-Block Self-encryption 479
- Appendix F. Verb List 481
- List of Abbreviations 491
- Glossary 493
- Numerics 499
- PDF File 508
Relacionado con productos y manuales para Software IBM Computer Hardware 2
Software IBM SG24-5131-00 Manual de usuario
(240 paginas)
(240 paginas)
Software IBM AS/400 Manual de usuario
(489 paginas)
(489 paginas)
Software IBM CISCO R2E2 Manual de usuario
(110 paginas)
(110 paginas)
Software IBM NETCOOL 4.3-W Manual de usuario
(516 paginas)
(516 paginas)
Software IBM Server OS/390 Manual de usuario
(76 paginas)
(76 paginas)
Software IBM Switch 15 Manual de usuario
(270 paginas)
(270 paginas)
Software IBM SC34-7012-01 Manual de usuario
(268 paginas)
(268 paginas)
Software IBM SC41-5420-04 Manual de usuario
(116 paginas)
(116 paginas)
Software IBM Transaction Server OS Manual de usuario
(103 paginas)
(103 paginas)
Software IBM SC34-5764-01 Manual de usuario
(481 paginas)
(481 paginas)
Software IBM TIVOLI SC32-0129-00 Manual de usuario
(82 paginas)
(82 paginas)
Software IBM G325-2585-02 Manual de usuario
(90 paginas)
(90 paginas)
Software IBM SG24-6526-00 Manual de usuario
(184 paginas)
(184 paginas)
Software IBM SC33-1686-02 Manual de usuario
(317 paginas)
(317 paginas)
Software IBM 5697-VM3 Manual de usuario
(6 paginas)
(6 paginas)
Software IBM DS6000 Manual de usuario
(406 paginas)
(406 paginas)
Software IBM CDI5UG1107 Manual de usuario
(178 paginas)
(178 paginas)
Software IBM GC28-1982-02 Manual de usuario
(216 paginas)
(216 paginas)
Software IBM 12.1(22)EA6 Manual de usuario
(550 paginas)
(550 paginas)
Magnetic-products RSDM2-04-REN-RE manuels
Manuels d'utilisation et guides de l'utilisateur pour Équipement Magnetic-products RSDM2-04-REN-RE.
Nous fournissons des manuels en pdf 1 Magnetic-products RSDM2-04-REN-RE à télécharger gratuitement par type de document : Manuel de l'utilisateur
Comentarios a estos manuales