W dniu 2010-07-23 17:46, Mark Jacobs pisze:
On 07/23/10 11:18, Lizette Koehler wrote:
I have been asked to research the use of ICSF in DB2.
I know that ICSF comes with z/OS. However, I am not sure if it really
requires a Crypto card to run.
Q1: Can you run ICSF without a Crypto Card?
Second, the intent is to encrypt row(s) of DB2 Data. Is ICSF the best
way to go or are there other options?
I will probably switch over to the DB2-L Group on this, but wanted to
know about the basic ICSF and Crypto Card issue first.
Thanks
Lizette
I believe that the crypto cards are needed for full ICSF functionally.
There may be certain ICSF API's that will take advantage of the CPAF
instructions on your processor but I'm not sure.
Crypto cards are needed for secure key cryptography. That includes
asymmetric cryptography and some symmetric functions.
As long we don't know what kind of cryptography is needed we cannot
judge whether crypto cards are required.
BTW: secure crypto functions are orders of magnitude slower than clear
key functions. (Very roughly it's 1000:1).
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sd Rejonowy dla m. st. Warszawy
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego,
nr rejestru przedsibiorców KRS 0000025237
NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2009 r. kapita zakadowy BRE Banku SA (w caoci
wpacony) wynosi 118.763.528 zotych. W zwizku z realizacj warunkowego
podwyszenia kapitau zakadowego, na podstawie uchway XXI WZ z dnia 16 marca
2008r., oraz uchway XVI NWZ z dnia 27 padziernika 2008r., moe ulec
podwyszeniu do kwoty 123.763.528 z. Akcje w podwyszonym kapitale zakadowym
BRE Banku SA bd w caoci opacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
