RE: Hercules support

Scott Ford wrote:

> Does anyone know if Hercules Hyperion will support CSF?
> I.E.; crypto cards.  If so, how are they defined?

Disclaimer: I am *not* a MVS or z/OS person!

It's unclear what you mean by "CSF", but I did a Google search of "CSF" and found this:

  https://www-01.ibm.com/common/ssi/cgi-bin/ssialias?infotype=an&subtype=ca&appname=Demonstration&htmlfid=897/ENUS902-260


   Withdrawal Announcement 902-260
   November 19, 2002
   Developer Relations Withdrawal: CSF Family of Products

                                     Program
   Description                       Number
 
   MVS(TM) CSF                       5620-BWN
   OpenCSF -- Single Site            5620-BWP
   CSF Workshop                      5620-BWQ


Additionally, SDL Hercules Hyperion's F.A.Q. states the following at the end of section 5.01 ("What architectural features are implemented?"):


  https://sdl-hercules-390.github.io/html/hercfaq.html#5.01


  "The following features are not yet implemented, either
   due to lack of documentation, limited host system capability,
   or lack of supporting hardware:"

  "ICRF (Cryptography)"



And I also found this at IBM:


  http://www-03.ibm.com/security/technologies/tech7.shtml


  "The ICRF is an optional feature of the ES/9000-9021 water
   cooled, bi-polar based family for use with ICSF/MVS.
   Together, ICRF with ICSF implement and facilitate the use
   of the Common Cryptographic Architecture (CCA), a technology
   that is the foundation of IBM's primary cryptographic
   offerings."


Given the above evidence, I suspect Hercules does NOT support "CSF" (an apparent feature of the ES/9000) due to lack of documentation.

That having been said, Hercules *does* however support certain cryptographic facilities/instructions(*).  For example, the following z/Architecture facilities *are* currently supported (ref: FAQ #5.01):


  * Message-Security-Assist Extension 1 Support
  * Message-Security-Assist Extension 2 Support
  * Message-Security-Assist Extension 3
  * Message-Security-Assist Extension 4
  * Message-Security Assist


And as far as I know, no special configuration file setting is necessary to enable them as they are an integral part of our z/Architecture support.


Hope that helps!



------------------------------------------------
(*) i.e. the z/Architecture instructions:

    B91E  KMAC   compute_message_authentication_code
    B928  PCKMO  perform_cryptographic_key_management_operation
    B92A  KMF    cipher_message_with_cipher_feedback
    B92B  KMO    cipher_message_with_output_feedback
    B92C  PCC    perform_cryptographic_computation
    B92D  KMCTR  cipher_message_with_counter
    B92E  KM     cipher_message
    B92F  KMC    cipher_message_with_chaining
    B93E  KIMD   compute_intermediate_message_digest
    B93F  KLMD   compute_last_message_digest

-- 
"Fish" (David B. Trout)
Software Development Laboratories
http://www.softdevlabs.com
mail: [email protected]