Just for fun, here is a little history of crypto for the mainframe systems.
1977 – IBM 3845 DES encryption unit (channel attached) 1979 – IBM 3848 DES encryption unit (channel attached) - Faster, adds Triple-DES 1989 - IBM 4753 channel-attached crypto unit - uses 4755 crypto adapter internally, first introduction of CCA crypto architecture for System z 1991 – S/390 ICRF (Integrated Cryptographic Facility) - Integrated feature on S/390 for high-speed DES operations using subset of CCA 1997 – S/390 CCF single-chip CMOS crypto replaces ICRF. Adds public-key functions (but no RSA key generation). TKE for secure remote administration. 2001 – zSeries adds the PCICC – a 4758 crypto card under the covers. (4758 had been introduced in 1996 on other IBM platforms) 2001 – PCICA cryptographic accelerator - RSA acceleration - uses 4758 Model 2 crypto chips. Optimized for speed instead of security. 2003 – PCIXCC (4764) Cryptographic Coprocessor - Replacement for 4758/PCICC and PCICA 2003 – CPACF (CP Assist for Cryptographic Functions) added to System z. Integrated into CPUs. Clear key DES/TDES, SHA-1. (other algorithms added in later generations) 2004 - Crypto Express2 introduced 2009 – Protected Key CPACF 2009 - Crypto Express3 (4765 card) replaces PCIXCC 2012 - Crypto Express4S - same crypto card as Crypto Express3, but packaged differently for new mainframes Todd Arnold IBM Cryptographic Coprocessor Development Charlotte, NC ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
