Re: [MI400] MI a good use for encryption?

["Leif Svalgaard" <leif@xxxxxxxx>]

From: Dan Bale <dbale@samsa.com>
> >With V5R1, there is a built in AES implementation (in the CIPHER
> >instruction).
> >You can invoke CIPHER from RPG, so you have lots of choices.
>
> No kidding!  Might be just the thing to get our sluggish V3R7 clients to
get
> current.  Is CIPHER an RPG opcode?  A built-in?  API?
>

Dan, I'm afraid that the AES function still requires you to
fork over more money to IBM:


> On the V5R1 MI Functions Reference manual on the web, at:
>
> Under the CIPHER instruction, for function code 0010, 0011,
> 0013, and 0015 (all hex) it says:
>
> "... In order to use this function identifier, the cryptography attributes
> must contain an algorithm entry that specifies AES is provided by the
> machine service provider. If no such entry exists, then requested function
> not valid  (hex 1C08) exception will be signaled. ..."
>
> I am not absolutely certain, but I believe that the phrase:
> "machine service provider" may mean that you must purchase and
> install one of the encryption LPPs, and possibly some "crypto"
> hardware feature code, for this to work.
>
> It is my understanding that only limited functions of the CIPHER
> instruction (e.g. hex codes 0002, 0005 and 0007) are supported by
> the "base" OS/400 program product.
>

I actually just tried it and indeed the AES is not available on my V5R1
box.  NFG.