IBM i Global

 View Only
Expand all | Collapse all

Does the Encrypt Data (QC3ENCDT, Qc3EncryptData) API will support "AES/CBC/PKCS7Padding" ?

  • 1.  Does the Encrypt Data (QC3ENCDT, Qc3EncryptData) API will support "AES/CBC/PKCS7Padding" ?

    Posted Thu April 20, 2023 09:38 PM

    Current support PKCS7Padding , just bouncy-castle provider, means we need use java on IBM i.

    Does the Encrypt Data (QC3ENCDT, Qc3EncryptData) API and  Decrypt Data (OPM, QC3DECDT; ILE, Qc3DecryptData) API will support "AES/CBC/PKCS7Padding" ?



    ------------------------------
    Vengoal Chang
    ------------------------------


  • 2.  RE: Does the Encrypt Data (QC3ENCDT, Qc3EncryptData) API will support "AES/CBC/PKCS7Padding" ?

    IBM Champion
    Posted Fri April 21, 2023 07:27 AM
    Edited by Satid Singkorapoom Fri April 21, 2023 07:48 AM

    Dear Vengoal

    It would be good if you specify IBM i release you want to know about this matter. 

    At release 7.5, the information about Encrypt Data (QC3ENCDT, Qc3EncryptData) API at https://www.ibm.com/docs/en/i/7.5?topic=ssw_ibm_i_75/apis/qc3encdt.html indicates the following cipher algorithm are supported : DES, Triple DES, AES, and RC2.  CBC mode is also mentioned as being supported.  FYI, the cryptography co-processor on Power9 and Power10 CPU chip supports AES (meaning good performance as it does not consume Power CPU power).  You can select IBM i release of your interest in the web page I provided above and see the answer. 

    ------------------------------
    Education is not the learning of facts but the training of the mind to think. -- Albert Einstein.
    ------------------------------
    Satid S.
    ------------------------------

    Original Message