Mark,
I was just at SHARE, and was talking to Greg Boyd from IBM. He told me about
your topic on IBM-MAIN (this is the first time I've been on here). I'm also
interested in getting the AES CTR cipher support added to ICSF. Please let me
know how I can get my name added to the list! I discussed
On 03/17/14 15:11, Don Brooke wrote:
Mark,
I was just at SHARE, and was talking to Greg Boyd from IBM. He told me about
your topic on IBM-MAIN (this is the first time I've been on here). I'm also
interested in getting the AES CTR cipher support added to ICSF. Please let me
know how I can get
@LISTSERV.UA.EDU] On Behalf
Of Mark Jacobs
Sent: Monday, March 17, 2014 12:30 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: aes-ctr vs aes-cbc
On 03/17/14 15:11, Don Brooke wrote:
Mark,
I was just at SHARE, and was talking to Greg Boyd from IBM. He told me about
your topic on IBM-MAIN
Mark,
I was thinking about whether there are good temporary workarounds for your
problem.
First attempt:
I was thinking that you could maybe use Match for the specific client
host that needs it and then in sshd_config add aes_ctr to the Ciphers for
that client and in zos_sshd_config change
-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Mark Jacobs
Sent: Monday, March 10, 2014 11:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: aes-ctr vs aes-cbc
We've been trying to migrate our ssh/sftp environment, for both our client
and server users to only use FIPS
Mark,
Yes, Ported Tools OpenSSH with ICSF does not support CTR mode AES ciphers.
I would ask that you submit a requirement for this.
I happen to be giving a SHARE presentation in Aneheim today which covers
this. If you happen to be here, please stop and say hi.
[mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Mark Jacobs
Sent: Monday, March 10, 2014 11:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: aes-ctr vs aes-cbc
We've been trying to migrate our ssh/sftp environment, for both our client and
server users to only use FIPS-140-2 certified ciphers, and run
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Mark Jacobs
Sent: Monday, March 10, 2014 11:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: aes-ctr vs aes-cbc
We've been trying to migrate our ssh/sftp environment, for both our client
