Re: Encryption Help

Hello Peter,

Am 01.04.2020 um 15:52 schrieb peter jones <kirkhill@xxxxxxxxxx>:

I need to encrypt a physical or stream file on an Iseries at record and file level.

The file will then be passed securely to a non-ibm site for decryption.

The Iseries (or what ever the new model name is) has OS V7.

When you simply "copy" an IBM i database, even without encryption, non-IBM sites can cope with that data not out of the box. Is this is a one-shot thing? Or must this be done on a regular base?

I'd opt to use cpytostmf to export the database table(s) into the IFS, so they're readable by non-IBM means.

Afterwards, you can (ordered by increasing security):
- use ZIP to create a password protected ZIP file from the file(s),
- use PGP or GNUPG to do a symmetric encryption of the file(s),
- use PGP or GNUPG with appropriate keys in place to very securely encrypt the file(s).

Which method to apply is dependent on how solid the data should be protected. In either case, the remote side has to get hold on the decryption key or password, preferably not by unencrypted eMail.

Sorry I have no real knowledge of how encryption really works, storage of keys etc.

Pick an appropriate method, then I can help further.

I assume this is beyond taking an example program from someone like Scott Klement.

Yes.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc