z/OS Cryptographic Services System SSL Programming
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


03353034

z/OS Cryptographic Services System SSL Programming
SC14-7495-00

03353034
Encryption key size is not supported.

Explanation

The encryption key size is not supported by the System SSL run time.

User response

See the System SSL information to determine which key sizes are supported. In general, when executing in non-FIPS mode, 40-bit keys and 128-bit keys are supported for RC2 and RC4, 56-bit keys are supported for DES, 168-bit keys are supported for Triple DES, and 128-bit keys and 256-bit keys are supported for AES. RSA keys must be between 512 and 4096 bits, DSS keys must be between 512 and 2048 bits, and Diffie-Hellman keys must be between 512 and 2048 bits.

When executing in FIPS mode, 168-bit keys are supported for Triple DES, and 128-bit keys and 256-bit keys are supported for AES. RSA keys must be between 1024 and 4096 bits, DSS keys must be between 1024 and 2048 bits, and Diffie-Hellman keys must be 2048 bits.

This error can also occur if the requested key size is not compatible with the supplied key generation parameters. See the System SSL information to determine which key sizes are supported.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014