If your BSAFE application uses either the AM_DES_CBC_ENCRYPT or the AM_DES_CBC_DECRYPT algorithm methods, you can add a chooser containing the algorithm methods AM_TOKEN_DES_CBC_ENCRYPT and/or AM_TOKEN_DES_CBC_DECRYPT (both new with BSAFE 3.1) and a couple of BSAFE function calls and your program can use ICSF and the Cryptographic Coprocessor Feature to encrypt and/or decrypt data using the DES algorithm.

For your encryption or decryption key, you can use either a clear key in the form of a KI_8Byte or KI_DES8 or KI_Item (8 bytes long), or a CCA DES Key Token in the form of a KI_TOKEN (64 bytes long). KI_TOKEN is a new key information type in BSAFE 3.1.

The following list shows BSAFE AI types with choosers that may include either AM_TOKEN_DES_CBC_ENCRYPT, AM_TOKEN_DES_CBC_DECRYPT, or both:

• AI_DES_CBC_BSAFE1
• AI_DES_CBC_IV8
• AI_DES_CBCPadBER
• AI_DES_CBCPadIV8
• AI_DES_CBCPadPEM
• AI_MD5WithDES_CBCPad
• AI_MD5WithDES_CBCPadBER
• AI_SHA1WithDES_CBCPad
• AI_SHA1WithDES_CBCPadBER