IBM Crypto Education Community

Back to discussions
Expand all | Collapse all

Entering keys using KGUP key generator utility program instead TKE

  • 1.  Entering keys using KGUP key generator utility program instead TKE

    Posted Mon November 29, 2021 01:09 PM
    Hello
    We usually enter our keys from the TKE console. But due to an accident we must wait for a new one and adapt it (it will take a while)The alternative we have is to use KGUP from Z/OS, but we are learning and understanding the sentences.
    We need to enter a 3 component AES CLEAR KEY, each component has 4 key part.
    With the TKE it is natural for us to enter each of the Key components, but at KGUP we are learning. The sentence we generate is: 

     

    ADD TYPE(DATA) ALGORITHM(AES),                               

     CLEAR KEY(0123456789ABCDEF,0123456789ABCDEF,0123456789ABCDEF, 0123456789ABCDEF),                                          

     CLEAR KEY(0123456789ABCDEF,0123456789ABCDEF,0123456789ABCDEF, 0123456789ABCDEF),                                          

     CLEAR KEY(0123456789ABCDEF,0123456789ABCDEF,0123456789ABCDEF, 0123456789ABCDEF),                                           

     LAB(PREUBA.RAFA.KGUP)  

    Does this sentence look rigth?
    Thanks 
    Rafa



    ------------------------------
    Rafael Espinoza Cardenas
    ------------------------------


  • 2.  RE: Entering keys using KGUP key generator utility program instead TKE

    Posted Mon November 29, 2021 02:11 PM
    Edited by Eric Rossman Mon November 29, 2021 02:46 PM
    KGUP doesn't support importing a key by parts. You could use the CSNBKPI (Key Part Import) callable service to do this or you could pre-XOR the key parts and then use KGUP to import the full key material.

    ------------------------------
    Eric Rossman
    ------------------------------

    Original Message