IBM 2 Computer Hardware User Manual


 
CCA Release 2.54
Figure 5-5 (Page 1 of 3). Control Vector Key-Subtype and Key-Usage Keywords
Keyword Meaning
Key-Encrypting Keys
OPIM IMPORTER keys that have a control vector with this attribute can
be used in the Key_Generate verb when the key form is OPIM.
IMEX IMPORTER and EXPORTER keys that have a control vector with
this attribute can be used in the Key_Generate verb when the key
form is IMEX.
IMIM IMPORTER keys that have a control vector with this attribute can
be used in the Key_Generate verb when the key form is IMIM.
IMPORT IMPORTER keys that have a control vector with this attribute can
be used to import a key in the Key_Import verb.
OPEX EXPORTER keys that have a control vector with this attribute can
be used in the Key_Generate verb when the key form is OPEX.
EXEX EXPORTER keys that have a control vector with this attribute can
be used in the Key_Generate verb when the key form is EXEX.
EXPORT EXPORTER keys that have a control vector with this attribute can
be used to export a key in the Key_Export verb.
XLATE IMPORTER and EXPORTER keys that have a control vector with
this attribute can be used in the Key_Translate verb.
ANY Key-encrypting keys that have a control vector with this attribute
can be used to transport any type of key.
NOT-KEK Key-encrypting keys that have a control vector with this attribute
cannot be used to transport key-encrypting keys.
DATA Key-encrypting keys that have a control vector with this attribute
can be used to transport keys with a key type of DATA, CIPHER,
ENCIPHER, DECIPHER, MAC, and MACVER.
PIN Key-encrypting keys that have a control vector with this attribute
can be used to transport keys with a key type of PINVER,
IPINENC, and OPINENC.
Note: The PINGEN key cannot be transported by this type of
KEK.
LMTD-KEK Key-encrypting keys that have a control vector with this attribute
can be used to exchange keys with key-encrypting keys that carry
NOT-KEK, PIN, or DATA key-type ciphering restrictions.
Data Operation Keys
SMKEY Enable the encryption of keys in an EMV secure message.
SMPIN Enable the encryption of PINs in an EMV secure message
PIN Keys
NO-SPEC The control vector does not require a specific PIN-calculation
method.
IBM-PIN Select the IBM 3624 PIN-calculation method.
IBM-PINO Select the IBM 3624 PIN-calculation method with offset
processing.
GBP-PIN Select the IBM German Bank Pool PIN-calculation method.
GBP-PINO Select the IBM German Bank Pool PIN-calculation method with
institution-PIN input or output.
5-10 IBM 4758 CCA Basic Services, Release 2.54, February 2005