IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Delivered
Workspace IBM Z and LinuxONE Systems Hardware
Categories Crypto HW
Created by Guest
Created on Jun 9, 2016

RELATED IDEAS

Using CPACF with HW "built-In" instructions - Linux on z

SV likes to use HW Crypto support of CPACF (see Principles of Operation) in their applications running on Linux for z Systems (LinuxONE)
As of requiremts of their architecture and as of performance reasons, they want to use the CPACF instructions directly within their application, which is purly C-code

Today they have to write some load-modules, which provide the HW instructions of CPACF, or they have to write inline assembler code. They would like to use the machine instructions directly.

Please, provide a solution to use CPACF without the detour of assembler.
This could be done may be as calls to a library?

For the ISV who requests such enhancement and also for other ISVs, a simplified way, which is not depending on using Assembler would be of a nice advantage.

Here is the ISV contact for this requirement:
Falk Reichbott
Leiter der technischen Entwicklung f?r die Produktfamilien FLIES? & FLAM?
limes datentechnik? gmbh
Louisenstrasse 21
D-61348 Bad Homburg v.d.H.
mobil: +49(0)1520-9827936
phone: +49(0)6172-5919-21
fax: +49(0)6172-5919-39
mailto: falk.reichbott@flam.de
web: www.flam.de & www.limes.de

Note: limes datentechnik provides applications for the Deutsche Bundesbank (federal bank of Germany)

Top priority is to get a solution for a C environment on Linux for z.

Idea priority Medium
  • Guest
    Reply
    |     Aug 24, 2020

    Due to processing by IBM, this request was reassigned to have the following updated attributes:
    Brand - Servers and Systems Software
    Product family - z Systems Hardware
    Product - z Systems Hardware
    Component - Crypto HW

    For recording keeping, the previous attributes were:
    Brand - Servers and Systems Software
    Product family - LinuxONE
    Product - IBM LinuxONE
    Component - Crypto HW

  • Guest
    Reply
    |     Nov 15, 2019

    .Delivered with Libica

  • Guest
    Reply
    |     Jun 3, 2019

    Has your requirement been met by the provided suggestion?

  • Guest
    Reply
    |     Jun 22, 2016

    The libica C-library should fullfill the requirement. Libica is shipped with every Linux on z distribution.
    libica provides C-interfaces for all clear key cryptographic functions supported by CPACF. It is described in the following document:
    https://www.ibm.com/support/knowledgecenter/linuxonibm/liaaf/lnz_r_cicnt.html

    libica is an open source library under IBM's CPL library.

    As an alternative to directly calling libica you can also call openCryptoki with the ica token using a PKCS #11 API. Yet another alternative would be to call libcrypto (with or w/o ibmca engine configured) which also exploits CAPCF to some extend (e.g. w/o ibmca no DES/3DES, no OFB, CFB modes, with ibmca no CTR, XTS modes)

    If libica does not fullfill your requirement, please explain what is missing.

  • Guest
    Reply
    |     Jun 14, 2016

    Creating a new RFE based on Community RFE #89782 in product IBM LinuxONE.

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.