IBM 2 Computer Hardware User Manual


 
CCA Release 2.54 Key_Generate
Figure 5-12. Key_Type and Key_Form Keywords for a Key Pair
Key_Type_1 Key_Type_2 Key_
Form
OPOP,
OPIM,
IMIM
Key_
Form
OPEX
Key_
Form
EXEX
Key_
Form
IMEX
DATA
MAC
MAC
MACVER
DATAC *
DATAM *
DATAM *
CIPHER
CIPHER
CIPHER
DECIPHER
DECIPHER
ENCIPHER
ENCIPHER
KEYGENKY *
DKYGENKY *
DATA
MAC
MACVER
MAC
DATAC *
DATAM *
DATAMV *
CIPHER
DECIPHER
ENCIPHER
CIPHER
ENCIPHER
CIPHER
DECIPHER
KEYGENKY *
DKYGENKY *
X X X X
EXPORTER
IMPORTER
EXPORTER
IKEYXLAT
IKEYXLAT
IMPORTER
OKEYXLAT
OKEYXLAT
PINGEN
PINVER
IMPORTER
EXPORTER
IKEYXLAT
EXPORTER
OKEYXLAT
OKEYXLAT
IMPORTER
IKEYXLAT
PINVER
PINGEN
X X X
OPINENC
IPINENC
IPINENC
OPINENC
E X X X
OPINENC OPINENC X
CVARDEC *
CVARENC *
CVARENC *
CVARENC *
CVARXCVL *
CVARXCVR *
CVARDEC *
CVARPINE *
CVARENC *
CVARDEC *
CVARXCVL *
CVARXCVR *
CVARENC *
CVARENC *
CVARPINE *
CVARDEC *
E E
Note: The key types marked with an * must be requested through the specification of a proper
control-vector in a key token and the use of the TOKEN keyword.
Key-Length Specification
The key_length parameter points to a variable containing a keyword or eight space
characters which specifies the length of a key, either single or double. The
key-length specified must be consistent with the key length indicated by the control
vectors associated with the generated keys. You can specify SINGLE, KEYLN8,
SINGLE-R, KEYLN16, DOUBLE, or eight space characters. The SINGLE-R
keyword (“single replicated”) indicates that you want a double-length key where
both halves of the key are identical. Such a key performs as though the key were
single length.
Figure 5-13 on page 5-50 shows the valid key lengths for each key type. An ‘X’
indicates that a key length is permitted for a key type and a ‘D’ indicates the default
Chapter 5. DES Key-Management 5-49