Introduction

Version 7 of the IBM Global Security Toolkit (GSKit) component can integrate with and exploit hardware cryptographic devices that support the PKCS#11 industry standard.

Hardware PKCS#11 devices offer a variety of features across operating system platforms. Please refer to the PKCS#11 device vendor for specific details of their offering. Some of the most common features include:

• More secure key storage and protected usage (some with tamper detection).
• Offloading of CPU intensive operations to device hardware. For example, most devices support asymmetric key operations.
• Some devices are capable of load sharing when more than one of them is installed.

GSKit's use of PKCS#11 is limited to those functions (where available) required for secure communication via SSL:

• Asymmetric key generation and secure storage
• Certificate storage
• Asymmetric key operations (Sign & Verify, and Decryption during SSL key-exchange)
• Random number generation
• Hash functions (i.e. digest calculation)
• Symmetric key operations

Trust Anchor Certificates (Root Certificates) should only be stored on the device where the device offers Certificate modification/replacement protection via the setting of the PKCS#11 CKA_TRUSTED attribute. The support and setting of this attribute is vendor-specific. If in doubt, do not use the PKCS#11 device for Trust Anchor Certificate storage but rather use a GSKit key store.

The GSKit component team performs interoperability testing on specific hardware, firmware, and driver levels for each device. IBM product teams typically test on a subset of these devices. If an integration problem is found, the IBM product team, IBM GSKit component team, and the PKCS#11 device vendor will work together on defect resolution. All IBM product defects should be reported through the standard IBM product support channels.

Operating system platforms

This article does not cover z/OS® or OS/400® variants of GSKit. In general, the list of platforms an IBM product integrates with a PKCS#11 device is the intersection of the IBM product's supported platforms and the PKCS#11 device's supported platforms. Known exceptions are noted below in the section “Card observations” or in IBM product documentation.

Hardware cryptographic devices tested with GSKit, Version 7

Refer issues regarding installation and configuration of these cards and software to the device vendor.

• nCipher
  • nCipher netHSM (500, 1600 and 2000)
  • nCipher nForce (300 and 1600)
  • nCipher nShield (800, F2 and F3)
• SafeNet
  • Orange (CSA8000)
  • LunaSA HSM
• Sun
  • The on-chip cryptography within the Sun Ultra-SPARC T1 and T2 CMT processor (Solaris 10 on Sparc)
• IBM
  • IBM 4758 PCI Cryptographic Coprocessor (4758-002/023)
  • IBM 4764 PCI Cryptographic Coprocessor (4764-001)
  • IBM e-business Cryptographic Accelerator (4960, PCICA)
  • IBM PCICC (feature 860 for S/390®, feature 861 for zSeries®)
  • IBM PCICA (feature 862 for zSeries)
  • IBM PCIXCC (feature 868 for zSeries)
  • IBM Crypto Express2 (CEX2) (feature 863 for zSeries)
  • IBM CP Assist for Cryptographic Function - CPACF (feature 3863 for zSeries)
  • IBM Crypto Express3 (CEX3)
• Thales
  • nShield 6000e F2 PCI-Express (Solo)
  • nShield Edge

Observations on specific cards

nCipher nForce, nShield, and; netHSM

• Set the environment variable CKNFAST_OVERRIDE_SECURITY_ASSURANCES to weak-des;tokenkeys;silent. This setting is required when using an nCipher device for symmetric key operations when enabled with GSKit. In this mode of operation, GSKit directly creates the SSL Session Key as a PKCS#11 Session Object during the SSL handshake. Despite the security override being required, no security issue is caused as the SSL Session Key is created by GSKit as part of the SSL handshake. nCipher devices do not provide Symmetric Key acceleration and as such, GSKit should not be enabled for the mode of operation when using nCipher devices.
• CipherTools, Version 10.15 or higher is required
• Mechanisms available to GSKit in the nCipher "Security World" differ with the FIPS Level choice. For example, in strict FIPS 140-2 Level 3, MD5 is not available and is therefore performed by GSKit software when required for TLS FIPS approved CipherSuites.
• Linux® support is restricted to libc 6.2 and up, and Linux kernels 2.4.0 and higher.

nShield 6000e F2 PCI-Express (Solo) and nShield Edge

• Set the environment variable CKNFAST_OVERRIDE_SECURITY_ASSURANCES to "import;silent". This setting is required when using an nCipher device for symmetric key operations when enabled with GSKit. In this mode of operation, GSKit directly creates the SSL Session Key as a PKCS#11 Session Object during the SSL handshake. Despite the security override being required, no security issue is caused as the SSL Session Key is created by GSKit as part of the SSL handshake. nCipher devices do not provide Symmetric Key acceleration and as such, GSKit should not be enabled for the mode of operation when using nCipher devices unless absolutely required.

IBM PCICA and PCICC

• GSKit, Version 7 is restricted to Linux on zSeries. Please refer to System SSL documentation for z/OS crypto device information.
• These devices require Linux for zSeries crypto driver - z90crypt 1.1.2 and higher.

IBM CEX2

• GSKit, Version 7 is restricted to Linux on zSeries. Please refer to SystemSSL documentation for z/OS crypto device information.
• There are 2 modes for this device:
  • CEX2C mode - requires Linux for zSeries crypto driver - z90crypt 1.3.2 and higher
  • CEX2A mode - requires Linux for zSeries crypto driver - z90crypt 1.3.3 and higher.

IBM CEX3

• The GSKit testing statement is restricted to Linux on zSeries and GSKit 7.0.4.33 or later must be used. Please refer to SystemSSL documentation for z/OS crypto device information.

IBM CPACF

• GSKit, Version 7 is restricted to Linux on zSeries. Please refer to System SSL documentation for z/OS crypto device information.
• There are machine instructions included on z890, z990 and z9 processors. Feature code 3863 enables them.
• On z990, this feature accelerates the following symmetric and hashing cryptographic algorithms: DES, DES3 and SHA-1
• • In addition, this feature accelerates AES128, SHA-256 and Pseudo Random Number Generator on z9 machines.

About the author

Rate this article

Comments

Back to top

Table of contents

• Introduction
• Operating system platforms
• Hardware cryptographic devices tested with GSKit, Version 7
• Observations on specific cards
• About the author
• Comments

Next steps from IBM

WebSphere Portal can help your small and midsize business achieve better website security, along with faster time to value with easily deployable and customizable example Web sites.

---

• Try: Download a free trial version of IBM WebSphere Portal Express V6.1, which offers collaboration, document management, and secure Web content management.
• Article: This article provides an overview of the WebSphere Portal security architecture, including internet security, and secure connections between clients.
• Tutorial: This tutorial take you through the steps to develop and test your first portlet WebSphere Portal Test Environment.
• Demo: These demos show Web 2.0 features available today within WebSphere Portal, as well as several features planned for the future.
• Buy: IBM WebSphere Portal Express

Dig deeper into Tivoli on developerWorks

Try IBM PureSystems. No charge.

Experience today!

---

Get started with the cloud-based trial and pattern development kit.

Special offers