IBM 2 Computer Hardware User Manual


 
CCA Release 2.54 PKA_Decrypt
PKA_Decrypt (CSNDPKD)
Platform/
Product
OS/2 AIX Win NT/
2000
OS/400
IBM 4758-2/23 X X X X
The PKA_Decrypt verb decrypts (unwraps) input data using an RSA private-key.
The decrypted data is examined to ensure it meets RSA DSI PKCS #1 block type 2
format specifications. See “PKCS #1 Formats” on page D-19.
Restrictions
1. A key-usage flag bit (see offset 050 in the private-key section) must be on to
permit use of the private key in the decryption of a symmetric key.
2. The RSA private-key modulus size (key size) is limited by the Function Control
Vector to accommodate potential governmental export and import regulations.
The verb enforces this restriction.
| 3. Beginning with Release 2.53, a private key with the CLONE attribute is rejected
| by this verb with return code 8, reason code 64 (decimal).
Format
CSNDPKD
return_code Output Integer
reason_code Output Integer
exit_data_length In/Output Integer
exit_data In/Output String exit_data_length bytes
rule_array_count Input Integer one
rule_array Input String
array
rule_array_count * 8 bytes
source_encrypted_key_length Input Integer
source_encrypted_key Input String source_encrypted_key_length
bytes
data_structure_length Input Integer
data_structure In/Output String data_structure_length bytes
private_key_identifier_length Input Integer
private_key_identifier Input String private_key_identifier_length
bytes
clear_target_key_length In/Output Integer
clear_target_key Output String clear_target_key_length
bytes
Parameters
For the definitions of the return_code, reason_code, exit_data_length, and exit_data
parameters, see “Parameters Common to All Verbs” on page 1-11.
rule_array_count
The rule_array_count parameter is a pointer to an integer variable containing
the number of elements in the rule_array variable. The value must be one for
this verb.
rule_array
The rule_array parameter is a pointer to a string variable containing an array of
keywords. The keywords are eight bytes in length, and must be left-justified
and padded on the right with space characters. The rule_array keywords are
shown below:
Chapter 5. DES Key-Management 5-73