IBM Computer Hardware 2 User Manual Page 192

  • Download
  • Add to my manuals
  • Print
  • Page
    / 508
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 191
Key_Export CCA Release 2.54
Key_Export (CSNBKEX)
Platform/
Product
OS/2 AIX Win NT/
2000
OS/400
IBM 4758-2/23 X X X X
The Key_Export verb exports a source DES internal-key into a target external
key-token. Existing information in the target key-token is overwritten. The target
key is enciphered by the EXPORTER-key exclusive-ORed with the control vector of
the target key.
Specify the following:
Key_type
A keyword for the key type. Use of the TOKEN keyword is the preferred coding
style. For compatibility with older systems, however, you can explicitly name a
key type, in which case the key type must match the key in the control vector of
the source key-identifier.
source_key_identifier
A source-key internal key-token or the key label of an internal key-token record
in key storage containing the source key to be exported.
exporter_key_identifier
An EXPORTER key-encrypting-key under which the target key is enciphered.
target_key_token
A 64-byte field to hold the target key-token.
The verb builds the external key-token:
Copies the control vector from the internal key-token to the external key-token,
except when the source key has a control vector valued to the default DATA
control-vector for single- or double-length keys, in which case the target control
vector is set to zero.
Multiply-deciphers the source key under keys formed by the exclusive-OR of
the master key and the control vector in the source key-token,
multiply-enciphers the key under keys formed by the exclusive-OR of the
EXPORTER key-encrypting-key and target-key control vector, and places the
result in the target key-token.
Calculates a token-validation value and stores it in the target key-token.
Places the external key-token in the 64-byte field identified by the
target_key_token parameter, ignoring any preexisting data.
Restrictions
Starting with Release 2.41, unless you enable the Unrestrict Reencipher From
Master Key command (offset X'0276'), an EXPORTER key-encrypting-key having
equal key-halves is not permitted to export a key having unequal key-halves. Note
that key parity bits are ignored.
5-42 IBM 4758 CCA Basic Services, Release 2.54, February 2005
Page view 191
1 2 ... 187 188 189 190 191 192 193 194 195 196 197 ... 507 508

Comments to this Manuals

No comments