> -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Chase, John > Sent: Tuesday, November 15, 2011 3:43 PM > To: [email protected] > Subject: Re: Data encrypt > > > -----Original Message----- > > From: IBM Mainframe Discussion List On Behalf Of Farley, Peter x23353 > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List On Behalf Of Rob Schramm > > > > > > If you want something similar to clear key performance, use the > > > protected key security option. Keys are secure and cpacf is used > > > for decrypt processing. While not quite as fast as clear key.. it is > > > only a little slower... and more secure. And still way faster than > > > crypto operations in CEX2 or CEX3. > > > > If you are talking about using the ICSF solution to store clear keys > > in the ICSF key store and retrieve them using ICSF labels, I have tested > > that interface (and the ICSF callable subroutines CSNBSYE and CSNBSYD). > > I found the CPU increase using these routines to be substantial (for > > 1,000,000 executions of encrypting and decrypting a 16-byte key, CPU > > time of 6 minutes and 15 seconds for the ICSF subroutines vs. 1.68 CPU > > seconds for the assembler subroutine using the CPACF hardware > > instructions). > > Do you happen to have the billable MSU cost difference and elapsed time > difference between the two methods?
Sorry, I never had "billable MSU" differences, the only measurement tool that I had available measured only CPU time. The test was done many months ago so the elapsed time is lost for now, but ISTR the elapsed time difference was also quite substantial. I am not able to re-run the tests at this time to get a more exact number than "quite substantial". Peter -- This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
