Performance and processor types

The performance of host-based encryption can vary, depending on the type of processor and encryption being used. For example, DFSMSdss can use the Cipher Message with Chaining (KMC) System z® instruction for some types of encryption if it is running on the appropriate processor. If the KMC instruction is not available or the type of encryption requires it, DFSMSdss uses the appropriate ICSF service to perform the encryption.

The table below describes the method of encryption that is used under various encryption types and processors.

Processor                        Method of Encryption
Encryption Type
------------------------------------------------------------------
z/800, z/900
o Clear TDES                     ICSF Service
o Clear 128-bit AES              ICSF Service
o Secure TDES                    ICSF Service
------------------------------------------------------------------
z/890, z990
o Clear TDES                     KMC instruction
o Clear 128-bit AES              ICSF Service
o Secure TDES                    ICSF Service
------------------------------------------------------------------
z8, z9 109
o Clear TDES                     KMC instruction
o Clear 128-bit AES              KMC instruction
o Secure TDES                    ICSF Service
------------------------------------------------------------------