I'm not sure I understand the question. Tokens should be stored in KDSes as 
much as possible. If you are using CSFKDSL, why do you want to know the format?

BTW, I can give you a simple check. If it is DES or AES DATA, it's 
fixed-length. Otherwise, it's variable-length.

Eric Rossman
---------------------------------
ICSF Security Architect
z/OS Security
---------------------------------

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Radoslaw Skorupka
Sent: Tuesday, July 1, 2025 4:49 PM
To: [email protected]
Subject: [EXTERNAL] ICSF fixed vs variable length key tokens

Is there any service which tell me whether the token is fixed or variable 
format?

Example: AES DATA is fixed, AES CIPHER is variable.
Different tools to manage, etc.
CSFKDSL can show label and type, but I don't know format of every type possible.

Any clue?


--
Radoslaw Skorupka
Lodz, Poland

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to