IBM Computer Hardware 2 Manual de usuario Pagina 428
- Pagina / 508
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
CCA Release 2.54
CCA Key Encryption and Decryption Processes
This section describes the CCA key-encryption processes:
CCA DES key encryption
CCA RSA private key encryption
Encipherment of DES keys under RSA in “PKA92” format
Encipherment of a DES key-encrypting key under RSA in “NL-EPP-5” format.
CCA DES Key Encryption and Decryption Processes
With the CCA, multiple enciphering or multiple deciphering a key is a two-step
process. The implementation first exclusive-ORs the subject key’s control vector
with the master key or with a key-encrypting key to form keys K1 through K6. The
resulting keys (Kn) are used in the multiple-encipherment of a clear key, or the
multiple-decipherment of an encrypted key; see Figure C-4 on page C-13 for the
formation of K1 through K6 and their use with DES DEA encoding and decoding.
CCA RSA Private Key Encryption and Decryption Process
RSA private keys are generally encrypted using an “EDE” algorithm. See
“Triple-DES Ciphering Algorithms” on page D-10.
With the CCA Support Program Version 1, a private key in an internal key token
encrypted by the master key is encrypted using the EDE3 process. The secret key
is deciphered using the DED3 process. A private key in an external key token
encrypted by a transport key is encrypted using the EDE2 process. The secret key
is deciphered using the DED2 process.
With the CCA Support Program Version 2, the private key is encrypted using an
“object protection key” (OPK). The OPK is encrypted with the asymmetric master
key. For internal keys, the secret key values are then encrypted by the OPK. For
external encrypted private keys encryption is provided by the DES transport key.
See Figure B-11 on page B-13 and Figure B-12 on page B-14.
C-12 IBM 4758 CCA Basic Services, Release 2.54, February 2005
- Release 2.54 1
- IBM iSeries PCICC Feature 1
- Contents 3
- CCA Release 2.54 10
- Trademarks 13
- About This Publication 15
- Release 2.52 16
- Release 2.51 16
- Release 2.41 17
- About This Publication xix 19
- Organization 22
- Related Publications 23
- Cryptography Publications 23
- Overlapped Processing 31
- CCA Access-Control 40
- Understanding Access Control 40
- Role-Based Access Control 40
- Understanding Roles 41
- Understanding Profiles 42
- Logging On and Logging Off 45
- Multi-Coprocessor Capability 48
- Establishing Master Keys 51
- Logon_Control (CSUALCT) 90
- Master_Key_Process (CSNBMKP) 97
- Related Information 100
- Random_Number_Tests (CSUARNT) 102
- Restrictions 102
- Parameters 102
- Required Commands 103
- Chapter 3. RSA Key-Management 105
- Key Generation 106
- Key Import 108
- Using the PKA Keys 109
- Extracting a Public Key 110
- PKA_Key_Generate (CSNDPKG) 111
- PKA_Key_Import (CSNDPKI) 115
- PKA_Key_Token_Build (CSNDPKB) 118
- CCA Release 2.54 122
- Digital Signatures 136
- MDC_Generate (CSNBMDG) 144
- One_Way_Hash (CSNBOWH) 147
- Chapter 5. DES Key-Management 151
- Control Vectors 154
- Key Types 155
- Key-Usage Restrictions 156
- Key Tokens 162
- Key Labels 164
- Key Identifiers 164
- Installing and Verifying Keys 165
- Generating Keys 166
- Diversifying Keys 169
- Storing Keys in Key Storage 170
- Security Precautions 171
- Clear_Key_Import (CSNBCKI) 172
- Data_Key_Export (CSNBDKX) 181
- Data_Key_Import (CSNBDKM) 183
- Key_Export (CSNBKEX) 192
- Key_Generate (CSNBKGN) 194
- Key-Length Specification 199
- Key_Import (CSNBKIM) 201
- CCA Release 2.54 Key_Import 203
- Key_Part_Import (CSNBKPI) 204
- Key_Test (CSNBKYT) 208
- Key_Token_Build (CSNBKTB) 211
- Key_Token_Change (CSNBKTC) 214
- Key_Token_Parse (CSNBKTP) 216
- Key_Translate (CSNBKTR) 219
- PKA_Decrypt (CSNDPKD) 223
- PKA_Encrypt (CSNDPKE) 225
- PKA_Encrypt CCA Release 2.54 226
- Ensuring Data Confidentiality 243
- Ensuring Data Integrity 245
- Decipher (CSNBDEC) 247
- Decipher CCA Release 2.54 248
- Encipher (CSNBENC) 250
- CCA Release 2.54 Encipher 251
- MAC_Generate (CSNBMGN) 253
- MAC_Verify (CSNBMVR) 256
- Chapter 7. Key-Storage Verbs 259
- Key-Label Content 260
- DES_Key_Record_List (CSNBKRL) 265
- PKA_Key_Record_List (CSNDKRL) 273
- PKA_Key_Record_Read (CSNDKRR) 275
- Retained_Key_List (CSNDRKL) 280
- Processing Financial PINs 284
- PIN-Verb Summary 287
- Providing Security for PINs 288
- PIN Security 289
- PIN-Calculation Methods 290
- Data_Array 290
- PIN Profile 292
- PIN-Extraction Methods 294
- Working With EMV Smart Cards 295
- Clear_PIN_Encrypt (CSNBCPE) 297
- Clear_PIN_Generate (CSNBPGN) 300
- CVV_Generate (CSNBCSG) 309
- CVV_Verify (CSNBCSV) 312
- PIN_Change/Unblock (CSNBPCU) 334
- SET_Block_Compose (CSNDSBC) 348
- SET_Block_Decompose (CSNDSBD) 352
- Return Codes 361
- Reason Codes 361
- Return Code 0 362
- Return Code 4 363
- Return Code 8 364
- Return Code 12 370
- Return Code 16 371
- Appendix B. Data Structures 373
- Null Key-Token 374
- DES Key-Tokens 375
- External DES Key-Token 377
- RSA PKA Key-Tokens 378
- RSA Key-Token Sections 379
- PKA Key-Token Integrity 380
- Chaining-Vector Records 392
- Key-Storage Records 393
- Key_Record_List Data Set 397
- Role Structure 401
- Aggregate Role Structure 402
- Access-Control-Point List 402
- Default Role Contents 403
- Profile Structure 404
- Aggregate Profile Structure 405
- Authentication Data Structure 405
- User Profile 408
- Role Data Structure 411
- Aggregate Role Data Structure 412
- Function Control Vector 414
- Encryption 417
- Changing Control Vectors 432
- Mask Array Preparation 436
- Notation Used in Calculations 444
- MDC-1 Calculation 444
- MDC-2 Calculation 445
- MDC-4 Calculation 445
- Ciphering Methods 445
- ANSI X9.23 447
- MAC Calculation Methods 453
- RSA Key-Pair Generation 455
- Access-Control Algorithms 456
- ANSI X9.31 Hash Format 459
- PKCS #1 Formats 459
- PIN-Calculation Methods 462
- PIN-Block Formats 469
- 3624 PIN-Block Format 469
- ISO-0 PIN-Block Format 470
- ISO-1 PIN-Block Format 471
- ISO-2 PIN-Block Format 472
- UKPT Calculation Methods 473
- CVV and CVC Method 476
- PIN-Block Self-encryption 479
- Appendix F. Verb List 481
- List of Abbreviations 491
- Glossary 493
- Numerics 499
- PDF File 508
Relacionado con productos y manuales para Software IBM Computer Hardware 2
Software IBM SG24-5131-00 Manual de usuario
(240 paginas)
(240 paginas)
Software IBM AS/400 Manual de usuario
(489 paginas)
(489 paginas)
Software IBM CISCO R2E2 Manual de usuario
(110 paginas)
(110 paginas)
Software IBM NETCOOL 4.3-W Manual de usuario
(516 paginas)
(516 paginas)
Software IBM Server OS/390 Manual de usuario
(76 paginas)
(76 paginas)
Software IBM Switch 15 Manual de usuario
(270 paginas)
(270 paginas)
Software IBM SC34-7012-01 Manual de usuario
(268 paginas)
(268 paginas)
Software IBM SC41-5420-04 Manual de usuario
(116 paginas)
(116 paginas)
Software IBM Transaction Server OS Manual de usuario
(103 paginas)
(103 paginas)
Software IBM SC34-5764-01 Manual de usuario
(481 paginas)
(481 paginas)
Software IBM TIVOLI SC32-0129-00 Manual de usuario
(82 paginas)
(82 paginas)
Software IBM G325-2585-02 Manual de usuario
(90 paginas)
(90 paginas)
Software IBM SG24-6526-00 Manual de usuario
(184 paginas)
(184 paginas)
Software IBM SC33-1686-02 Manual de usuario
(317 paginas)
(317 paginas)
Software IBM 5697-VM3 Manual de usuario
(6 paginas)
(6 paginas)
Software IBM DS6000 Manual de usuario
(406 paginas)
(406 paginas)
Software IBM CDI5UG1107 Manual de usuario
(178 paginas)
(178 paginas)
Software IBM GC28-1982-02 Manual de usuario
(216 paginas)
(216 paginas)
Software IBM 12.1(22)EA6 Manual de usuario
(550 paginas)
(550 paginas)
Magnetic-products RSDM2-04-REN-RE manuels
Manuels d'utilisation et guides de l'utilisateur pour Équipement Magnetic-products RSDM2-04-REN-RE.
Nous fournissons des manuels en pdf 1 Magnetic-products RSDM2-04-REN-RE à télécharger gratuitement par type de document : Manuel de l'utilisateur
Comentarios a estos manuales