Rob Schramm wrote: >In order to use OpenPGP, you have to have CPACF (which may or may not >already be on your system.. but is free) and a crypto express 2/3/4 >card/feature. Otherwise the Encryption Facility ( that OpenPGP is a part >of ) is relegated to a smaller subset of functionality which does not >include OpenPGP.
>Having said all that .. that was at the last time I read thru all the doc >and it was prior to being able to run ICSF without a CEX2/3 card. >Does anyone know if the CEX3/4 requirement has been lifted with the changes >to ICSF? I'm sure it hasn't been: IBM isn't adding new software algorithms, in general. They've enhanced CPACF, but not for things like RSA/DSA/DH/EC. Which makes sense, as those are all spendy in software; offloading that to a CEX makes sense. >All of the aforementioned strategies.. megacryption, voltage, co:z are >valid as well.. for completeness sake..pkware also offers something. Yes, PKZIP for z/OS. It's, well, PKZIP for z/OS. Nice for ZIP use cases, but not a general solution. -- ...phsiii Phil Smith III [email protected]<mailto:[email protected]> Voltage Security, Inc. www.voltage.com<http://www.voltage.com/> (703) 476-4511 (home office) (703) 568-6662 (cell) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
