Re: CIPHER

Beth,

Thanks for getting those answers.

Just in case users have influence in this matter, I would like PKCS#1 given
top priority to be implemented as an api on the iseries. The api when
completed, should be made available to all supported release levels.

Steve Richter

-----Original Message-----
From: Beth Hagemeister <hag@us.ibm.com>
To: mi400@midrange.com <mi400@midrange.com>
Date: Wednesday, August 22, 2001 11:47 AM
Subject: Re: [MI400] CIPHER


>
>Steve, I have talked with several people to answer your questions. See
>responses --.
>
>Very informative Beth, Thank You.
>
>So basically CIPHER works by receiving a ptr to bytes, the lgth of the
>bytes, the key, the type of encryption and the direction.  And it returns
>an encrypted/decrypted version of the bytes?
>Same key in either direction.
>
>     -- Correct.
>
>Too bad about the PKA restrictions.
>
>     -- These restrictions only apply to our BSAFE toolkit.
>
>Are there any other algorithms in the works to compete with RSA?
>
>     -- You mean on iSeries?  Diffie Helman and DSA are implemented in
>BSAFE and JCE.  Again, we cannot expose our BSAFE to customer apps.
>However, you can obtain the BSAFE toolkit from RSA Security Inc.
>
>>4758 crypto card with a set of APIs available in the OS/400.  3) RSA is
>>implemented within JCE.
>
>Does the crypto card do any processing, or does it just make sure you are
>not running the PKA api's without paying for them?
>
>     -- RSA processing is done on the card and there are no restrictions on
>those APIs because the RSA is a different implementation.  You purchase the
>card; the APIs come with OS/400.
>
>So to implement PKA, you have to pay RSA thru IBM on the iseries,
>
>     -- No, anyone can implement the RSA algorithm.  Our license agreement
>for BSAFE prohibits us from exposing APIs. We are considering an
>alternative solution.
>
>then what on the other end? say a windows pc? Does windows have it built it
>or its there a similar arangement with RSA to use PKA on the pc?
>
>     -- The BSAFE toolkit is available for several platforms.  You can
>visit http://www.rsa.com/ for more information.   There are other
>implementations available as well.  I believe that RSA is available through
>the MSCAPI interfaces in Windows.   You can also download the openSSL
>toolkit.  It supports a lot of algorithms including RSA.  Look at
>http://www.openssl.org for more information.
>
>If the public key code is free, does the iseries come with no charge public
>key encrypt/decrypt support?
>
>     -- MI CIPHER does not support PKA. RSA is available via the 4758
>crypto card, which must be purchased.  The RSA implementation in JCE comes
>as part of OS/400.
>
>and last ?, What is JCE?
>
>     -- JCE is Java Crypto Extensions 1.2.1.
>
>It is PKA that I am most interested in Beth, so I dont need any CIPHER code
>samples.
>
>Many thanks,
>
>Steve Richter
>
>
>_______________________________________________
>This is the MI Programming on the AS400 / iSeries (MI400) mailing list
>To post a message email: MI400@midrange.com
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/cgi-bin/listinfo/mi400
>or email: MI400-request@midrange.com
>
>
>_______________________________________________
>This is the MI Programming on the AS400 / iSeries (MI400) mailing list
>To post a message email: MI400@midrange.com
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/cgi-bin/listinfo/mi400
>or email: MI400-request@midrange.com
>
>