Re: [MI400] MI a good use for encryption?

["Beth Hagemeister" <hag@xxxxxxxxxx>]

This is a multipart message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
> Dan, I'm afraid that the AES function still requires you to
> fork over more money to IBM:

No, there is no cost.

>> On the V5R1 MI Functions Reference manual on the web, at:
>>
>> Under the CIPHER instruction, for function code 0010, 0011,
>> 0013, and 0015 (all hex) it says:
>>
>> "... In order to use this function identifier, the cryptography
attributes
>> must contain an algorithm entry that specifies AES is provided by the
>> machine service provider. If no such entry exists, then requested
function
>> not valid  (hex 1C08) exception will be signaled. ..."
>>
>> I am not absolutely certain, but I believe that the phrase:
>> "machine service provider" may mean that you must purchase and
>> install one of the encryption LPPs, and possibly some "crypto"
>> hardware feature code, for this to work.
>>
>> It is my understanding that only limited functions of the CIPHER
>> instruction (e.g. hex codes 0002, 0005 and 0007) are supported by
>> the "base" OS/400 program product.
>>

In V5R1, we added several new cryptographic functions.  There was a post
to MI400 with the information.  Search for subject "CIPHER".

> I actually just tried it and indeed the AES is not available on my V5R1
> box.  NFG.

You must order and install 5722-AC3, a no-charge LP.  That will enable
cryptography on the system.

Beth Hagemeister
iSeries Cryptographic Services
Rochester, MN