IMHO you should get rid of IDCAMS REPRO ENCIPHER. This is obsolete,
IBM stopped to support it. Even on 2064 with CCF it required
COMPAT(YES), while suggested option is COMPAT(NO). This parameter
provides compatibility with quite ancient tihings like PCF (pre-ICSF,
pre-OS/390).
I disagree. The ENCIPHER option of REPRO is written to an old interface
(PCF) but it is still clearly documented and supported, even in z/OS
1.7. It only supports single DES encryption, but it does work.
In the ICSF manuals, the COMPAT option gives you the ability to run both
ICSF and PCF together, or to run ICSF with PCF-compatibility. Although
one part of the ICSF manual says to use COMPAT(YES) only if you are
converting from PCF to ICSF, another part clearly says that COMPAT(YES)
is required to use the ENCIPHER option of REPRO.
Since the DES standard has now been decertified by the US Commerce Dept
(AES is certified and TDES (triple DES) is still certified but
discouraged), I agree that the ENCIPHER option is pretty useless since
it only suports single DES.
I'm playing with an IDCAMs encipher job as part of my getting familiar with
encryption on the mainframe. I've found nothing, however, that will tell
me if its actually using the coprocessor to do the encryption. Any way I
can easily tell what kind of work the coprocessor is doing?
AFAIK, there is no software-only implementation of DES provided in ICSF,
so it must be using one of the available co-processors, depending on
your CPU type. ICSF does have a software implementation of AES, since
the AES co-processor is only available on the z9 systems.
--
Bruce A. Black
Senior Software Developer for FDR
Innovation Data Processing 973-890-7300
personal: [EMAIL PROTECTED]
sales info: [EMAIL PROTECTED]
tech support: [EMAIL PROTECTED]
web: www.innovationdp.fdr.com
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
