PM49445: JAVA 6.0.1 JCECCA DOCUMENTATION UPDATE REGARDING AES KEYS IN THE CKDS

APAR status

• Closed as documentation error.

Error description

• The IBM JCECCA Hardware Cryptography documentation for Java
  6.0.1 is missing the following:
  
  "A key object containing the CKDS label for an encrypted AES key
  can be used for CBC mode or ECB mode encryption and decryption
  with the IBMJCECCA provider."
  
  This functionality was added with the release of Java 6.0.1.
  Prior to this release, encrypted AES keys within the CKDS could
  not be used by their label names for CBC or ECB encryption and
  decryption.
  
  This APAR will address updating the JCECCA documentation to note
  this new feature.
  

Local fix

Problem summary

• The IBMJCECCA Hardware Cryptography documentation is missing
  documentation for functionality added to Java release 6.0.1
  and Java release 7.0.  The added function deals with how
  encrypted AES keys within the CKDS can be used by their
  label names, for encryption and decryption.
  

Problem conclusion

• IBMJCECCA Hardware Cryptography documentation was updated
  to include missing documentation, for Java release 6.0.1
  and Java release 7.0.0.  The documentation was updated to
  include the statement:
  
  "A key object containing the CKDS label for an encrypted
  AES key can be used for CBC mode or ECB mode encryption and
  decryption with the IBMJCECCA provider."
  
  The following IBMJCECCA Hardware Cryptography documentation
  has been updated:
  
  "z/OS Unique Considerations for the Java SDK.
     Standard Edition, V 6.0.1"
  "Java Cryptography Extension (JCE)
     API Specification & Reference
     for Java SDK V 6.0.1"
  "z/OS Unique Considerations for the Java SDK.
     Standard Edition, V 7.0.0"
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels