Are you trying to store a transport key, one that is used to encrypt and
decrypt data from another site?
I've always used the ICSF interface via ISPF to create and store these keys
Carmen
On 8/13/2021 2:16 PM, Isabel wrote:
Hello!
Our scenario:
We are running z/OS 2.2, Crypto Express 5 and FMID=HCR77B0
We want to calculate a hash using sha-256 with a certain secret key (or
seed) that is provided by someone external (and given to us). We are not
sure how to store that key in the CKDS Dataset. The length of the key is 32
bits and has the form of n(1)n(2)....n(32) where each n(i) is an
hexadecimal character (I don't know why...)
We already created and stored an AES master key in the cryptographic
hardware and we also changed the format of our CKDS in order to use HMAC.
We tried different ways of putting this key in the CKDS using different
verbs, like using a REXX example from the web (HMAC Generation from a Clear
Key )
In our mainframe we want to use the callable service (verb) CSNBHMG in a
Cobol program to calculate the hash using the key stored in the CKDS. This
output should be the same as the output using
https://www.freeformatter.com/hmac-generator.html#ad-output (with the same
key).
Our biggest issue is how to put this secret key (or seed) in the CKDS
dataset.
Any help will be appreciated,
Thanks in advance,
Andrea!
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
--
/I am not bound to win, but I am bound to be true. I am not bound to
succeed, but I am bound to live by the light that I have. I must stand
with anybody that stands right, and stand with him while he is right,
and part with him when he goes wrong. *Abraham Lincoln*/
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
