IBM 2 Computer Hardware User Manual


 
CCA Release 2.54 Key_Export
Format
CSNBKEX
return_code Output Integer
reason_code Output Integer
exit_data_length In/Output Integer
exit_data In/Output String exit_data_length bytes
key_type Input String 8 bytes
source_key_identifier Input String 64 bytes
exporter_key_identifier Input String 64 bytes
target_key_token Output String 64 bytes
Parameters
For the definitions of the return_code, reason_code, exit_data_length, and exit_data
parameters, see “Parameters Common to All Verbs” on page 1-11.
key_type
The key_type parameter is a pointer to a string variable containing a keyword
that specifies the key type of the source key-token. The keyword is eight bytes
in length, and must be left-justified and padded on the right with space
characters. The key_type keywords are shown below:
CIPHER
DATA
DECIPHER
ENCIPHER
EXPORTER
IKEYXLAT
IMPORTER
IPINENC
MAC
MACVER
OKEYXLAT
OPINENC
PINGEN
PINVER
TOKEN
source_key_identifier
The source_key_identifier parameter is a pointer to a string variable containing
the source key-token or key label of a key-token record.
exporter_key_identifier
The exporter_key_identifier parameter is a pointer to a string variable
containing the EXPORTER key-encrypting-key token or key label of a
key-token record.
target_key_token
The target_key_token parameter is a pointer to a string variable containing the
target key-token.
Required Commands
The Key_Export verb requires the Reencipher from Master Key command (offset
X'0013') to be enabled in the active role.
By also specifying the Unrestrict Reencipher From Master Key command (offset
X'0276'), you can permit a less secure mode of operation that enables an equal
key-halves EXPORTER key-encrypting-key to export a key having unequal
key-halves (key parity bits are ignored).
Chapter 5. DES Key-Management 5-43