These services are available when there are no cryptographic coprocessors
or accelerators:
- Character/Nibble Conversion (CSNBXBC and CSNBXCB)
- Code Conversion (CSNBXEA and CSNBXAE)
- Control Vector Generate (CSNBCVG)
- Decode (CSNBDCO)
- Encode (CSNBECO)
- ICSF Query Facility (CSFIQF and CSFIQF6) - The only rule available
without a coprocessor is ICSFSTAT.
- ICSF Query Facility2 (CSFIQF2 and CSFIQF26)
- ICSF Query Algorithm (CSFIQA)
- MDC Generate (CSNBMDG and CSNBMDG1)
- One-Way Hash Generate (CSNBOWH and CSNBOWH1)
- PKA Key Token Build (CSNDPKB)
- PKA Public Key Extract (CSNDPKX)
- PKCS #11 Derive multiple keys (CSFPDMK)
- PKCS #11 Derive key (CSFPDVK)
- PKCS #11 Get attribute value (CSFPGAV)
- PKCS #11 Generate key pair (CSFPGKP)
- PKCS #11 Generate secret key (CSFPGSK)
- PKCS #11 Generate HMAC (CSFPHMG)
- PKCS #11 Verify HMAC (CSFPHMV)
- PKCS #11 One-way hash generate (CSFPOWH)
- PKCS #11 Private key sign (CSFPPKS)
- PKCS #11 Public key verify (CSFPPKV)
- PKCS #11 Pseudo-random function (CSFPPRF)
- PKCS #11 Set attribute value (CSFPSAV)
- PKCS #11 Secret key decrypt (CSFPSKD)
- PKCS #11 Secret key encrypt (CSFPSKE)
- PKCS #11 Token record create (CSFPTRC)
- PKCS #11 Token record delete (CSFPTRD)
- PKCS #11 Token record list (CSFPTRL)
- PKCS #11 Unwrap key (CSFPUWK)
- PKCS #11 Wrap key (CSFPWPK)
- Random Number Generate (CSNBRNG) and Random Number Generate Long
(CSNBRNGL)
- Symmetric Key Decipher (CSNBSYD and CSNBSYD1) - Only clear keys
are supported.
- Symmetric Key Encipher (CSNBSYE and CSNBSYE1) - Only clear keys
are supported.
- Symmetric MAC Generate (CSNBSMG, CSNBSMG1, CSNESMG, and CSNESMG1)
- Symmetric MAC Verify (CSNBSMV, CSNBSMV1, CSNESMV, and CSNESMV1)
- X9.9 Data Editing (CSNB9ED)
These services are available when there are no cryptographic coprocessors
and there are accelerators:
- Digital Signature Verify (CSNDDSV)
- PKA Decrypt (CSNDPKD)
- PKA Encrypt (CSNDPKE) ZERO-PAD formatting only
Note: - Installation defined callable services are supported only if you're
using clear keys and using one of the supported callable services.
- If running without an active PKCS #11 Cryptographic
coprocessor, the PKCS #11 callable services are limited to clear
keys only.