John Mattson wrote:
Is it possible to use this configuration ((ICSF) on z890 with no coprocessors) to encrypt particular fields, SSN, credit card numbers, etc? For example, get the number from the Internet, or whereever, have the Cobol (ex) program call some funciton to encrypt it in memory, and then store the encrypted field in IMS, VSAM etc. Then have the program (cobol for example) read in the encrypted field, call some function to decrypt it for processing. Yes, I know that encrypting select fields has problems, but management is not willing to pay to encrypt everything.
Yes, it is possible, especially if you have CPACF enabled (it's not a card). However, without the cards you cannot use "safe cryptography". Safe means with secret key. Such key never exist in clear form in any dataset or even central storage (only in card's storage). If you consider clear key method as sufficient, then you can use it. Encryption alghorithm can be as strong as with the cards. Performance would be worse, but it could be quite acceptable.
BTW: IMHO it is very good idea to encrypt selected fields, not "everything". -- Radoslaw Skorupka Lodz, Poland ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
