Re: [MI400] MI a good use for encryption?

["Beth Hagemeister" <hag@xxxxxxxxxx>]

This is a multipart message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
>> You must order and install 5722-AC3, a no-charge LP.  That will enable
>> cryptography on the system.
>>

> why is it not part of the base system now that export restrictions have
> been eased? And the AES is not even a US technology, so the argument
> that US companies may not export US know-how to bad people elsewhere
> is moot. Furthermore AES is freely available anywhere.

First, the government doesn't care so much where the algorithm comes from.
 They care about how hard it is to break, which normally translates into
key length.  Secondly, U.S. export restrictions my have disappeared, but
foreign import restrictions are still a concern.  However, as export
restrictions eased, we have changed our crypto products as well
(lengthening key limitations for example).  We have generally played it
conservative in the past.  If at some point the government tightens export
of cryptography and we have it as part of the base operating system, we
could loose the ability to ship iSeries to certain geographies, or even
outside the country at all.  You are right that it is incovenient and we
are currently looking at what you propose - for example, preloading the
system with 5722-AC3.


Beth Hagemeister
iSeries Cryptographic Services
Rochester, MN