[prev in list] [next in list] [prev in thread] [next in thread] 

List:       racf-l
Subject:    Re: FTP password in the clear
From:       Philippe Richard1 <philippe_richard () FR ! IBM ! COM>
Date:       2016-05-24 6:12:55
Message-ID: 201605240613.u4O6D0uc029570 () d06av02 ! portsmouth ! uk ! ibm ! com
[Download RAW message or body]

this specific message from ICSF
CSFM126I CRYPTOGRAPHY - FULL CPU-BASED SERVICES ARE AVAILABLE

tells you that you have CPACF support available


Cordialement, Philippe
  ====================

Philippe richard1/France/IBM@IBMFR (n'oubliez pas le 1...)
IBM Client Center, Montpellier

mailto:philippe_richard@fr.ibm.com   Mail: Cie IBM France Sce 146301
Phone: +33 4 67346632 (38 6632)    Rue de la Vieille Poste -CS 81021
Fax:       +33 4 67346477                      34060 Montpellier Cedex  2 
IBM Client Center, Montpellier WEB Server: http://w3.pssc.mop.ibm.com

=================================================




From:   Lennie Dymoke-Bradshaw <lenniedb@RSMPARTNERS.COM>
To:     RACF-L@LISTSERV.UGA.EDU
Date:   23/05/2016 19:06
Subject:        Re: FTP password in the clear
Sent by:        RACF Discussion List <RACF-L@LISTSERV.UGA.EDU>



The hardware capabilities will need to be determined before ICSF can be 
used. 
If you have ICSF running you will at least have a useable CPACF.
(It is unusual to initialise ICSF without a Crypto Express but it can be 
done with just a CPACF. Support is only for symmetric clear keys.)

Crypto Express usage will require you to have ICSF active. This will 
supply support for asymmetric key processing (RSA for example). 
Examine the start-up messages from ICSF; for example,
CSFM400I CRYPTOGRAPHY - SERVICES ARE NOW AVAILABLE
CSFM130I CRYPTOGRAPHY - RSA SERVICES ARE AVAILABLE
CSFM127I CRYPTOGRAPHY - AES SERVICES ARE AVAILABLE
CSFM130I CRYPTOGRAPHY - ECC SERVICES ARE AVAILABLE
CSFM126I CRYPTOGRAPHY - FULL CPU-BASED SERVICES ARE AVAILABLE

Lennie Dymoke-Bradshaw
System z Specialist - Security Lead
 'Dance like no one is watching. Encrypt like everyone is.'
RSM Partners Limited
www.rsmpartners.com 

-----Original Message-----
From: RACF Discussion List [mailto:RACF-L@LISTSERV.UGA.EDU] On Behalf Of 
Ward, Mike S
Sent: 23 May 2016 16:27
To: RACF-L@LISTSERV.UGA.EDU
Subject: Re: FTP password in the clear

How can you tell what hardware acceleration you have? Can you use ICSF or 
do you have to go to the HMC to find out?

-----Original Message-----
From: RACF Discussion List [mailto:RACF-L@LISTSERV.UGA.EDU] On Behalf Of 
Alan Altmark
Sent: Friday, May 20, 2016 12:25 PM
To: RACF-L@LISTSERV.UGA.EDU
Subject: Re: FTP password in the clear

On Friday, 05/20/2016 at 04:36 GMT, Lennie Dymoke-Bradshaw 
<lenniedb@RSMPARTNERS.COM> wrote:
> System SSL may use ICSF and it may use CPACF if it finds either of 
> these
available. But if not, it
> will use software routines. So the performance will depend very much 
> on
what is available in the
> environment.

...which is why you limit your encryption selections to those algorithms 
for which you have hardware acceleration.  In other words, don't let your 
system select a poor-performing algorithm.  (One might wish that System 
SSL would figure that out for itself.)

Alan Altmark

Senior Managing z/VM and Linux Consultant Lab Services System z Delivery 
Practice IBM Systems & Technology Group 
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
Alan_Altmark@us.ibm.com
IBM Endicott

==========================
This email, and any files transmitted with it, is confidential and 
intended solely for the use of the individual or entity to which it is 
addressed. If you have received this email in error, please notify the 
system manager. This message contains confidential information and is 
intended only for the individual named. If you are not the named 
addressee, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
message by mistake and delete this e-mail from your system. If you are not 
the intended recipient, you are notified that disclosing, copying, 
distributing or taking any action in reliance on the contents of this 
information is strictly prohibited.



Sauf indication contraire ci-dessus:/ Unless stated otherwise above:
Compagnie IBM France
Siège Social : 17 avenue de l'Europe, 92275 Bois-Colombes Cedex
RCS Nanterre 552 118 465
Forme Sociale : S.A.S.
Capital Social : 657.364.587 ?
SIREN/SIRET : 552 118 465 03644 - Code NAF 6202A
[prev in list] [next in list] [prev in thread] [next in thread]