Hello Dave,
The Qc3EncryptData API and related Cryptographic Services APIs have been
covered in articles in the System iNetwork Programming Newsletter:
APIs by Example: Cryptographic Services APIs - article series, Part 7:
http://systeminetwork.com/article/apis-example-cryptographic-services-ap
is-part-7
APIs by Example: Crypto Key Management - Encrypt/Decrypt with Key
Hierarchy:
http://systeminetwork.com/article/apis-example-crypto-key-mgmt-encryptde
crypt-key-hierarchy
APIs by Example: AES Encryption to Actual Field Length:
http://systeminetwork.com/article/apis-example-aes-encryption-actual-fie
ld-length
The code accompanying the articles is written in RPG/IV though. At the
end of the two first articles you'll find links to the previous articles
in that article series. I think a free associate membership should
suffice to access the articles.
Here are some links to IBM documentation on the encryption topic:
Educational White Paper: Protecting i5/OS Data with Encryption:
http://www-03.ibm.com/servers/enable/site/education/abstracts/efbe_abs.h
tml
IBM System i Security: Protecting i5/OS Data with Encryption:
http://www.redbooks.ibm.com/Redbooks.nsf/RedpieceAbstracts/sg247399.html
?Open
Cryptographic Services APIs V5R4:
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/apis/catcryp
t.htm
i5/OS: Cryptography concepts V5R4:
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/rzajc/rzajcc
oncepts.htm
Scenario: Key Management and File Encryption Using the Cryptographic
Services APIs V5R4:
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/apis/qc3Scen
ario.htm
Happy reading!
Best regards,
Carsten Flensburg
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Dave Odom
Sent: 23. oktober 2008 22:53
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Using encryption/decryption of column data via a program
Vern, et al,
Thanks for the info. Trying to find the InfoCenter via the Search on
ibm.com was a real hassle; still not sure I found it. In any event....
for you or others that can help, my research so far shows the ENCRYPT
and DECRYPT SQL functions require the IBM Cryptographic Feature (old
program product 5722-AC3, now supposedly called Network Authentication
Enablement, 5722-NAE) be installed if you are as we are on V5R4. It
appears like we have 5722-NAE is installed. However, when I go to
STRSQL and invoke things like SET ENCRYPTION PASSWORD... or ENCRYPT,
just to kick the tires, I get the messages like "SQL Not allowed or
TOKEN not valid". So, how do you use in SQL?
As to Qc3EncryptData, is there anyone that has example code they'd like
to share on how to invoke this. The manual I found so far was not very
helpful in that regard. I'm hoping to invoke via REXX but will
consider other languages that can be called from REXX.
This communication is intended only for use by the addressee. It may contain confidential or privileged information. If you receive this communication unintentionally, please inform us immediately and delete this e-mail and any attachments. Warning: Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
midrange.com
