z/OS Cryptographic Services ICSF System Programmer's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Callable Services

z/OS Cryptographic Services ICSF System Programmer's Guide
SA22-7520-17

The following table summarizes the new and changes callable services for ICSF FMID HCR7790. For complete reference information on these callable services, refer to z/OS Cryptographic Services ICSF Application Programmer’s Guide.

Table 4. Summary of new and changed ICSF callable services
Callable serviceReleaseDescription
Clear PIN GenerateHCR7790Changed: Increased X9.8 PIN block security, stored PIN decimalization tables support.
Clear PIN Generate AlternateHCR7790Changed: Increased X9.8 PIN block security, stored PIN decimalization tables support.
Control Vector GenerateHCR7790Changed: ANSI TR-31 key block support.
Coordinated KDS AdministrationHCR7790New: Support for a coordinated CKDS refresh or a coordinated CKDS reencipher and master key change.
CVV Key CombineHCR7790New: Double-length CVV key support
Digital Signature VerifyHCR7790Changed: 4096-bit RSA clear key hardware support.
ECC Diffie-HellmanHCR7790New: Creation of:
  • Symmetric key material from a pair of ECC keys using the Elliptic Curve Diffie-Hellman protocol using the Static Unified Model
  • “Z" - The “secret" material output from D-H process
Encrypted PIN GenerateHCR7790Changed: Increased X9.8 PIN block security, stored PIN decimalization tables support.
Encrypted PIN VerifyHCR7790Changed: Increased X9.8 PIN block security, stored PIN decimalization tables support.
ICSF Query AlgorithmHCR7790Changed: 4096-bit RSA clear key hardware support.
ICSF Query FacilityHCR7790Changed:
  • Increased X9.8 PIN block security, stored PIN decimalization tables support.
  • ECC Diffie-Hellman (ECCDH) and ECC key wrapping support.
  • 4096-bit RSA clear key hardware support.
Key Generate2HCR7790Changed: AES key type support
Key Part Import2HCR7790Changed: AES key type support
Key Test2HCR7790Changed:
  • AES key type support
  • ANSI TR-31 key block support.
Key Token BuildHCR7790Changed: ANSI TR-31 key block support.
Key Token Build2HCR7790Changed: AES key type support
Key Translate2HCR7790Changed: AES key type support
PKA DecryptHCR7790Changed: 4096-bit RSA clear key hardware support.
PKA EncryptHCR7790Changed: 4096-bit RSA clear key hardware support.
PKA Key GenerateHCR7790Changed: Support for External ECC Keys (ECC Keys encrypted by an AES KEK)
PKA Key ImportHCR7790Changed: Support for External ECC Keys (ECC Keys encrypted by an AES KEK)
PKCS #11 Derive keyHCR7790Changed: Support for hardware generated “z" value.
PKCS #11 Derive multiple keysHCR7790Changed: Support for hardware generated “z" value.
PKCS #11 Private key signHCR7790Changed: 4096-bit RSA clear key hardware support.
PKCS #11 Public key verifyHCR7790Changed: 4096-bit RSA clear key hardware support.
PKCS #11 Unwrap keyHCR7790Changed: 4096-bit RSA clear key hardware support.
Restrict Key AttributeHCR7790Changed:
  • AES key type support
  • ANSI TR-31 key block support.
Secure Key Import2HCR7790Changed: AES key type support
Symmetric Algorithm DecipherHCR7790Changed: AES key type support
Symmetric Algorithm EncipherHCR7790Changed: AES key type support
Symmetric Key ExportHCR7790Changed:
  • AES key type support
  • Support for PKCS#1 OAEP data block formatting with the SHA-256 hash method
Symmetric Key GenerateHCR7790Changed: Support for PKCS#1 OAEP data block formatting with the SHA-256 hash method
Symmetric Key ImportHCR7790Changed: Support for PKCS#1 OAEP data block formatting with the SHA-256 hash method
Symmetric Key Import2HCR7790Changed: AES key type support
TR-31 ExportHCR7790New: ANSI TR-31 key block support.
TR-31 ImportHCR7790New: ANSI TR-31 key block support.
TR-31 Optional Data BuildHCR7790New: ANSI TR-31 key block support.
TR-31 Optional Data ReadHCR7790New: ANSI TR-31 key block support.
TR-31 ParseHCR7790New: ANSI TR-31 key block support.
VISA CVV Service VerifyHCR7790Changed: Double-length CVV key support
VISA CVV Service GenerateHCR7790Changed: Double-length CVV key support
ANSI X9.17 EDC GenerateHCR7780Changed: Support for invocation in AMODE(64).
ANSI X9.17 Key ExportHCR7780Changed: Support for invocation in AMODE(64).
ANSI X9.17 Key ImportHCR7780Changed: Support for invocation in AMODE(64).
ANSI X9.17 Key TranslateHCR7780Changed: Support for invocation in AMODE(64).
ANSI X9.17 Transport Key Partial NotarizeHCR7780Changed: Support for invocation in AMODE(64).
Ciphertext TranslateHCR7780Changed: Support for invocation in AMODE(64).
Clear PIN EncryptHCR7780Changed: Support for invocation in AMODE(64).
Clear PIN GenerateHCR7780Changed: Support for invocation in AMODE(64).
Clear PIN Generate AlternateHCR7780Changed: Support for invocation in AMODE(64).
Control Vector GenerateHCR7780Changed: Support for invocation in AMODE(64).
Control Vector TranslateHCR7780Changed: Support for invocation in AMODE(64).
Cryptographic Variable EncipherHCR7780Changed: Support for invocation in AMODE(64).
Data Key ExportHCR7780Changed: Support for invocation in AMODE(64).
Data Key ImportHCR7780Changed: Support for invocation in AMODE(64).
DecipherHCR7780Changed: Support for invocation in AMODE(64).
DecodeHCR7780Changed: Support for invocation in AMODE(64).
Digital Signature GenerateHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
Digital Signature VerifyHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
Diversified Key GenerateHCR7780Changed:
  • Support for invocation in AMODE(64).
  • New rule array keywords to support enhanced key wrapping method.
EncipherHCR7780Changed: Support for invocation in AMODE(64).
EncodeHCR7780Changed: Support for invocation in AMODE(64).
Encrypted PIN GenerateHCR7780Changed: Support for invocation in AMODE(64).
Encrypted PIN TranslateHCR7780Changed: Support for invocation in AMODE(64).
Encrypted PIN VerifyHCR7780Changed: Support for invocation in AMODE(64).
HMAC GenerateHCR7780New: Support for CCA key management of HMAC keys.
HMAC VerifyHCR7780New: Support for CCA key management of HMAC keys.
Key ExportHCR7780Changed: Support for invocation in AMODE(64).
Key Generate2HCR7780New: Support for CCA key management of HMAC keys.
Key ImportHCR7780Changed: Support for invocation in AMODE(64).
Key Part ImportHCR7780Changed:
  • Support for invocation in AMODE(64).
  • New rule array keywords to support enhanced key wrapping method.
Key Part Import2HCR7780New: Support for CCA key management of HMAC keys.
Key Record CreateHCR7780Changed: Support for invocation in AMODE(64).
Key Record Create2HCR7780New: Support for CCA key management of HMAC keys.
Key Record DeleteHCR7780Changed: Support for invocation in AMODE(64).
Key Record ReadHCR7780Changed: Support for invocation in AMODE(64).
Key Record Read2HCR7780New: Support for CCA key management of HMAC keys.
Key Record WriteHCR7780Changed: Support for invocation in AMODE(64).
Key Record Write2HCR7780New: Support for CCA key management of HMAC keys.
Key TestHCR7780Changed: Support for invocation in AMODE(64).
Key Test ExtendedHCR7780Changed: Support for invocation in AMODE(64).
Key Test2HCR7780New: Support for CCA key management of HMAC keys.
Key Token BuildHCR7780Changed:
  • Support for invocation in AMODE(64).
  • New rule array keywords to support enhanced key wrapping method.
Key Token Build2HCR7780New: Support for CCA key management of HMAC keys.
Key TranslateHCR7780Changed: Support for invocation in AMODE(64).
Key Translate2HCR7780New: Support for CCA key management of HMAC keys.
MAC GenerateHCR7780Changed: Support for invocation in AMODE(64).
MAC VerifyHCR7780Changed: Support for invocation in AMODE(64).
MDC GenerateHCR7780Changed: Support for invocation in AMODE(64).
Multiple Clear Key ImportHCR7780Changed: New rule array keywords to support enhanced key wrapping method.
Multiple Secure Key ImportHCR7780Changed:
  • Support for invocation in AMODE(64).
  • New rule array keywords to support enhanced key wrapping method.
One-Way Hash GenerateHCR7780New: Support for invocation in AMODE(64).
PIN Change/UnblockHCR7780Changed: Support for invocation in AMODE(64).
PKA Key GenerateHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
PKA Key ImportHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
PKA Key Token BuildHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
PKA Key Token ChangeHCR7780Changed:
  • Elliptic Curve Cryptography (ECC) support.
  • Support for invocation in AMODE(64).
PKA Public Key ExtractHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
PKDS Key Record CreateHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
PKDS Key Record DeleteHCR7780Changed: Elliptic Curve Cryptography (ECC) support.
PKDS Key Record ReadHCR7780Changed:
  • Elliptic Curve Cryptography (ECC) support.
  • Support for invocation in AMODE(64).
PKDS Key Record WriteHCR7780Changed:
  • Elliptic Curve Cryptography (ECC) support.
  • Support for invocation in AMODE(64).
Prohibit ExportHCR7780Changed: Support for invocation in AMODE(64).
Prohibit Export ExtendedHCR7780Changed: Support for invocation in AMODE(64).
Remote Key ExportHCR7780Changed: Support for invocation in AMODE(64).
Restrict Key AttributeHCR7780New: Support for CCA key management of HMAC keys.
Secure Key ImportHCR7780Changed: Support for invocation in AMODE(64).
Secure Key Import2HCR7780New: Support for CCA key management of HMAC keys.
Secure Messaging for KeysHCR7780Changed: Support for invocation in AMODE(64).
Secure Messaging for PINSHCR7780Changed: Support for invocation in AMODE(64).
SET Block ComposeHCR7780Changed: Support for invocation in AMODE(64).
SET Block DecomposeHCR7780Changed: Support for invocation in AMODE(64).
Symmetric Key DecipherHCR7780Changed: Additional modes of operation for protecting data.
Symmetric Key EncipherHCR7780Changed: Additional modes of operation for protecting data.
Symmetric Key ExportHCR7780Changed: Support for CCA key management of HMAC keys.
Symmetric Key GenerateHCR7780Changed:
  • Support for invocation in AMODE(64).
  • New rule array keywords to support enhanced key wrapping method.
Symmetric Key ImportHCR7780Changed: New rule array keywords to support enhanced key wrapping method.
Symmetric Key Import2HCR7780New: Support for CCA key management of HMAC keys.
Transaction ValidationHCR7780Changed: Support for invocation in AMODE(64).
Transform CDMF KeyHCR7780Changed: Support for invocation in AMODE(64).
Trusted Block CreateHCR7780Changed: Support for invocation in AMODE(64).
User Derived KeyHCR7780Changed: Support for invocation in AMODE(64).
VISA CVV Service GenerateHCR7780Changed: Support for invocation in AMODE(64).
VISA CVV Service VerifyHCR7780Changed: Support for invocation in AMODE(64).
PKCS #11 Derive keyHCR7770New: Support for PKCS #11.
PKCS #11 Derive multiple keysHCR7770New: Support for PKCS #11.
PKCS #11 Generate HMACHCR7770New: Support for PKCS #11.
PKCS #11 Generate key pairHCR7770New: Support for PKCS #11.
PKCS #11 Generate secret keyHCR7770New: Support for PKCS #11.
PKCS #11 One-way hash generateHCR7770New: Support for PKCS #11.
PKCS #11 Private key signHCR7770New: Support for PKCS #11.
PKCS #11 Pseudo-random functionHCR7770New: Support for PKCS #11.
PKCS #11 Public key verifyHCR7770New: Support for PKCS #11.
PKCS #11 Secret key decryptHCR7770New: Support for PKCS #11.
PKCS #11 Secret key encryptHCR7770New: Support for PKCS #11.
PKCS #11 Unwrap keyHCR7770New: Support for PKCS #11.
PKCS #11 Verify HMACHCR7770New: Support for PKCS #11.
PKCS #11 Wrap keyHCR7770New: Support for PKCS #11.
PKA Key TranslateHCR7770New: Support for RSA private key export.
PKA Key GenerateHCR7770Changed: Support for RSA private key export.
PKA Key Token BuildHCR7770Changed: Support for RSA private key export.
Symmetric Key ExportHCR7770Changed: Support for invocation in AMODE(64).
Symmetric Key ImportHCR7770Changed: Support for invocation in AMODE(64).
Symmetric Key EncipherHCR7770Changed: Support an encrypted key in the CKDS.
Symmetric Key DecipherHCR7770Changed: Support an encrypted key in the CKDS.
ICSF Query AlgorithmHCR7751New: HCR7751
Symmetric Algorithm DecipherHCR7751New: Supports secure key AES
Symmetric Algorithm EncipherHCR7751New: Supports secure key AES
Symmetric MAC GenerateHCR7751New: Supports IPv6
Symmetric MAC VerifyHCR7751New: Supports IPv6
ICSF Query FunctionHCR7751Changed: Supports secure key AES
Key GenerateHCR7751Changed: Supports secure key AES
Key Record CreateHCR7751Changed: Supports secure key AES
Key Record DeleteHCR7751Changed: Supports secure key AES
Key Record ReadHCR7751Changed: Supports secure key AES
Key Record WriteHCR7751Changed: Supports secure key AES
Key TestHCR7751Changed: Supports secure key AES
Key Token BuildHCR7751Changed: Supports secure key AES
Multiple Clear Key ImportHCR7751Changed: Supports secure key AES
Multiple Secure Key ImportHCR7751Changed: Supports secure key AES
Symmetric Key ExportHCR7751Changed: Supports secure key AES
Symmetric Key GenerateHCR7751Changed: Supports secure key AES
Symmetric Key ImportHCR7751Changed: Supports secure key AES
VISA CVV Service GenerateHCR7751Changed: Supports PAN-14, PAN-15, PAN-17 and PAN-18
VISA CVV Service VerifyHCR7751Changed: Supports PAN-14, PAN-15, PAN-17 and PAN-18

Go to the previous page Go to the next page

Notices | Terms of use | Support | Contact z/OS | zFavorites



Copyright IBM Corporation 1990, 2014