Actually, you might find that the crypto card is a less expensive option. I am told that software encryption/decryption is very costly in terms of CPU which is why IBM offered the 'specialty engine' (crypto card).
Not sure where so many get the bizarre idea that encryption is cheap/easy. It is expensive, hard to manage, fragile, and carries real risks of unrecoverable data loss. Encryption is also very expensive in data storage and transmission as it defeats data compression. Most all hardware storage devices advertize capacities assuming some compression. Indeed, it's easy to see how one could double or even triple the amount of DASD required to store the same amount of data. Of course some encryption is a modern business requirement. But a 'shotgun' approach may not be the best solution. -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Meganen Naidoo Sent: Wednesday, July 28, 2010 8:12 PM To: IBM-MAIN@bama.ua.edu Subject: Encryption Software products Hi everyone, One of our smaller clients, running on a Z9-BC, encryption requirements is for encryption of data at rest, encryption of tape data, support the OpenPGP format and usage of digital certificates. IBM's Encryption Facility for z/OS V1.2 has all of the required functionality but a crypto card is required to use digital certificates, making it a very expensive option. On to my question then. I'm looking for advice, experiences and recommendations of mainframe encryption software that will address the clients encryption requirements without any need for crypto hardware. Kind Regards, Meganen Naidoo Solutions Architect ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
