IBM 2 Computer Hardware User Manual


 
CCA Release 2.54
Figure 1-1. CCA Security API, Access Layer, Cryptographic Engine
IBM 4758 PCI Cryptographic Coprocessor: The Coprocessor provides a secure
programming and hardware environment wherein DES and RSA processes are
performed. The CCA support program enables applications to employ a set of
DES- and RSA-based cryptographic services utilizing the IBM 4758 hardware.
Such services include:
RSA key-pair generation
Digital signature generation and verification
Cryptographic key wrapping and unwrapping, including the SET-standardized
“OAEP” key-wrapping process
Data encryption and MAC generation/verification
PIN processing for the financial services industry
Other services, including DES key-management based on CCA's
control-vector-enforced key separation.
CCA: IBM has created the IBM Common Cryptographic Architecture (CCA) as the
basis for a consistent cryptographic product family. Implementations of this
architecture were first released in 1989, and it has been extended throughout the
years. The IBM 4758 and its CCA support program feature are a recent CCA
product offering that today implements a portion of those functions available with
older products as well as many new services such as the support of the SET
**
protocol.
Chapter 1. Introduction to Programming for the IBM CCA 1-3