Draft Document for Review April 7, 2004 6:15 pm

 

6947ch05.fm

 

 

 

 

 

 

Functions or Attributes

CPACF

PCIXCC

PCICA

 

 

 

 

 

 

Usable for data privacy - encryption and decryption processing

X

X

 

 

 

 

 

 

 

Usable for data integrity - hashing and message authentication

X

X

 

 

 

 

 

 

 

Usable for financial processes and key management operations

 

X

 

 

 

 

 

 

 

Crypto performance RMF™ monitoring

 

X

X

 

 

 

 

 

 

Requires system master keys to be loaded

 

X

 

 

 

 

 

 

 

System (master) key storage

 

X

 

 

 

 

 

 

 

Retained key storage

 

X

 

 

 

 

 

 

 

Tamper-resistant hardware packaging

 

X

 

 

 

 

 

 

 

Designed for FIPS 140-2 Level 4 certification

 

X

 

 

 

 

 

 

 

Supports SSL functions

X

X

X

 

 

 

 

 

 

Supports Linux applications doing SSL handshakes

 

 

X

 

 

 

 

 

 

RSA functions

 

X

X

 

 

 

 

 

 

High performance SHA-1, Hash function

X

 

 

 

 

 

 

 

 

Clear key DES/T-DES

X

 

 

 

 

 

 

 

 

Clear key RSA

 

X

X

 

 

 

 

 

 

Double length DUKPT support

 

X

 

 

 

 

 

 

 

Europay Mastercard VISA (EMV) support

 

X

 

 

 

 

 

 

 

Public Key Decrypt (PKD) support for Zero-Pad option for clear RSA

 

X

X

 

private keys)

 

 

 

 

 

 

 

 

 

Public Key Encrypt (PKE) support for MRP function

 

X

X

 

 

 

 

 

(1)Requires CPACF enablement

(2)In order to make addition of PCIXCC and PCICA features nondisruptive, the logical partition must be predefined with the appropriate PCI cryptographic processor number selected in its candidate list, on the partition image profile.

(3)Not required for Linux

(4)PCIXCC is assigned one PCHID per feature. PCICA is assigned two PCHIDs per feature (one per accelerator processor).

5.5Software requirements

Cryptographic support for z990 for OS/390 V2.10, z/OS V1.2 and later is made available as a Web deliverable.

z990 Cryptographic Support is planned to be available through May 28, 2004. It is a Web deliverable to provide exploitation support for the CPACF, PCICA, and PCIXCC features on behalf of OS/390 V2.10, and z/OS V1.2 and later releases. On May 28, 2004 this support is replaced by z990 and z890 Enhancements to Cryptographic Support.

z990 and z890 Enhancements to Cryptographic Support is planned to be available on May 28, 2004. It is a Web deliverable to provide exploitation support for CPACF, PCICA, and PCIXCC features on behalf of OS/390 V2.10, z/OS V1.3, z/OS V1.4, and z/OS V1.5, and in addition supports the following functions:

Chapter 5. Cryptography 129

Page 143
Image 143
IBM 990 manual Software requirements, Private keys Public Key Encrypt PKE support for MRP function

990 specifications

The IBM 990 series, often referred to in the context of IBM's pioneering efforts in the realm of mainframe computing, represents a unique chapter in the history of information technology. Introduced in the late 1960s, the IBM 990 series was designed as a powerful tool for enterprise-level data processing and scientific calculations, showcasing the company's commitment to advancing computing capabilities.

One of the main features of the IBM 990 was its architecture, which was built to support a wide range of applications, from business processing to complex scientific computations. The system employed a 32-bit word length, which was advanced for its time, allowing for more flexible and efficient data handling. CPUs in the IBM 990 series supported multiple instructions per cycle, which contributed significantly to the overall efficiency and processing power of the machines.

The technology behind the IBM 990 was also notable for its use of solid-state technology. This provided a shift away from vacuum tube systems that were prevalent in earlier computing systems, enhancing the reliability and longevity of the hardware. The IBM 990 series utilized core memory, which was faster and more reliable than the magnetic drum memory systems that had been standard up to that point.

Another defining characteristic of the IBM 990 was its extensibility. Organizations could configure the machine to suit their specific needs by adding memory, storage, and peripheral devices as required. This modular approach facilitated the growth of systems alongside the technological and operational demands of the business environments they served.

In terms of software, the IBM 990 series was compatible with a variety of operating systems and programming environments, including FORTRAN and COBOL, enabling users to access a broader array of applications. This versatility was a significant advantage, making the IBM 990 an appealing choice for educational institutions, research facilities, and enterprises alike.

Moreover, the IBM 990 was engineered to support multiprocessing, which allowed multiple processes to run simultaneously, further increasing its effectiveness in tackling complex computing tasks.

In summary, the IBM 990 series represents a significant advancement in computing technology during the late 20th century. With a robust architecture, versatile configuration options, and a focus on solid-state technology, the IBM 990 facilitated substantial improvements in data processing capabilities, making it a cornerstone for many businesses and academic institutions of its time. Its impact can still be seen today in the continued evolution of mainframe computing.