Hal and RS, I thought you might be interested to know that many of our customers use the software based encryption and compression capabilities of SecureZIP to significantly reduce the size of their encrypted files in storage. In order to achieve this benefit, there is a need for the file to first be compressed then encrypted. Some of our customers have also reduced their dependence on tape by using this method.
As you both had mentioned, if you have an application that encrypts and then tries to compress the file, there is no benefit. IBM does provide options with the crypto cards, there is the possibility of clear key, secure key and protected key. Should you have any further questions, you can contact me directly. Thanks and regards, Rob Steiskal Rob Steiskal Product Manager PKWARE, Inc. 330-523-0360 robert.steis...@pkware.com http://www.pkware.com Securely exchange PII with partners...without impacting their budgets. Read this Gartner report to learn how SecureZIP is being used to encrypt billions of sensitive records exchanged with external organizations. -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of R.S. Sent: Thursday, July 29, 2010 11:00 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Encryption Software products Hal Merritt pisze: > Actually, you might find that the crypto card is a less expensive option. I > am told that software encryption/decryption is very costly in terms of CPU > which is why IBM offered the 'specialty engine' (crypto card). That's absolutely untrue! Crypto cards are for secure key cryptography, not for speed. Cards are SLOOOW, orders of magnitude slower than CPACF, which is "built-in" the CPU. CPACF does not offer secure key cryptography - that's the drawback. The only 'specialty engine' is zIIP. Many software applications offering data encryption are zIIP-aware. > Not sure where so many get the bizarre idea that encryption is cheap/easy. It > is expensive, hard to manage, fragile, and carries real risks of > unrecoverable data loss. > > Encryption is also very expensive in data storage and transmission as it > defeats data compression. Most all hardware storage devices advertize > capacities assuming some compression. Indeed, it's easy to see how one could > double or even triple the amount of DASD required to store the same amount of > data. That's why there are tape drives with cryptography. Sich drive first compresses the data and then encrypts it. Obviously the process does not consume z/OS CPU cycles. -- Radoslaw Skorupka Lodz, Poland -- BRE Bank SA ul. Senatorska 18 00-950 Warszawa www.brebank.pl Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 0000025237 NIP: 526-021-50-88 Wedug stanu na dzie 01.01.2009 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 118.763.528 zotych. W zwizku z realizacj warunkowego podwyszenia kapitau zakadowego, na podstawie uchway XXI WZ z dnia 16 marca 2008r., oraz uchway XVI NWZ z dnia 27 padziernika 2008r., moe ulec podwyszeniu do kwoty 123.763.528 z. Akcje w podwyszonym kapitale zakadowym BRE Banku SA bd w caoci opacone. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
