W dniu 2013-01-17 21:22, Mark Jacobs pisze:
I've been reading the ICSF Applications Programmers guide and I
understand the process on how to transport ICSF keys to another zOS
system using importer/exporter keys, but I have no idea on how it would
work on a non-zOS platform.
Can anyone point me to some doc, or share their process if they've
already done it?
The least secure method, but the easiest si to sent the key in clear
form, unencrypted. That requires SSM=YES.
IOf you don't like clear keys then you should protect it by encrypting
the key using ...the other key. In ICSF it is usually the oter key
called transport key. Of course the other party (receiver) has to use
the same symmetric transport key to decrypt the "message".
The problem is how to get the same transport key in both systems. You
can send such key using other key for transport...
There are following solutions:
a) you really send first key in clear form.
b) you enter the key in both machines - the key is not sent, but rather
read from the sheet of paper by human entering it.
c) you can use assymetric cryptography to exchange the keys. The safest
way, probably he most complicated.
Now you know methods, but there is still problem with compatibility. The
other system have to understand the data sent from ICSF. Having smae
algorithms and keylenghts on both sides is prerequisite.
--
Radoslaw Skorupka
Lodz, Poland
--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive.
BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: [email protected]
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2013 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.555.904 zotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
