IBM Computer Hardware 2 User Manual download pdf (Page 379)

CCA Release 2.54

Coprocessor but your application will encounter a performance penalty with

each use of the key.

Protection of the private key is provided by encrypting a confounder (a random

number) and the private key information exclusive of the modulus. An encrypted

private key in an external key-token is protected by a double-length transport key

and the EDE2 algorithm. See “CCA RSA Private Key Encryption and Decryption

Process” on page C-12. The private key and the blinding values in an internal

key-token are protected by the triple-length asymmetric master key and encryption

algorithms as specified with each private key data structure.

RSA Key-Token Sections

A PKA key-token is the concatenation of an ordered set of sections. These

key-token-section data structures are described.

Note: A modulus-exponent format is not supported for RSA keys with a modulus

(key size) greater than 1024 bits.

You form a PKA key-token by concatenating these sections:

 A token header (see Figure B-8 on page B-9):

– An external header (first-byte X'1E')

– An internal header (first-byte X'1F')

 An optional private-key section in one of these formats:

– Section identifier X'02' for a clear or key-encrypting key enciphered,

modulus-exponent format key up to 1024 bits

– Section identifier X'06' for a master-key enciphered, modulus-exponent

format key up to 1024 bits

– Section identifier X'08' for a CRT-format key up to 2048 bits

Section Reference Usage

Header Figure B-8 on page B-9 RSA Token Header

X'04' Figure B-13 on page B-16 RSA Public Key

X'02' Figure B-9 on page B-10 RSA Private Key, 1024-Bit

Modulus-Exponent Format. Generated for

external format for clear keys or for keys

encrypted by a key-encrypting key.

X'05' Figure B-10 on page B-11 RSA Private Key, 2048-Bit

Chinese-Remainder Format. Accepted only

as an input and not generated in Version 2.

X'06' Figure B-11 on page B-13 RSA Private Key, 1024-Bit

Modulus-Exponent Format with OPK. Only

used as a master-key encrypted, internal

format.

X'08' Figure B-12 on page B-14 RSA Private Key, Chinese-Remainder

Format with OPK. Internal and external

format; replaces section type X'05'.

X'10' Figure B-14 on page B-16 RSA Private-Key Name

Figure B-15 on page B-17

through Figure B-21 on

page B-19

RSA Public-Key Certificate(s)

X'FF' Figure B-22 on page B-20 RSA Private-Key Blinding Information

Appendix B. Data Structures B-7

1 2 ... 374 375 376 377 378 379 380 381 382 383 384 ... 507 508

Comments to this Manuals

No comments

IBM Computer Hardware 2 User Manual Page 379

Comments to this Manuals

Related products and manuals for Software IBM Computer Hardware 2