Steps for generating a checksum, verification pattern, or hash
pattern for a key part
You can use the Utilities panel to generate a checksum and either
an optional verification pattern or an optional hash pattern for a
key part. You can use this panel to generate a checksum for a key
part even if ICSF has not been initialized.
Note: The use of the Utilities panel to generate the key part, the checksum, and the verification
pattern exposes the key part in storage for the duration of the dialogs. For this reason, you can
choose to calculate both the checksum, the verification pattern, or the hash pattern values manually
or by using a PC program. See Checksum Algorithm for a description of the checksum algorithm.
See Algorithm for calculating a verification pattern for a description of the algorithm for the verification pattern. See
The MDC–4 Algorithm for Generating Hash Patterns for a description of the MDC-4 algorithm that is used to calculate a hash
pattern for a key part. The use of the verification pattern or hash pattern is optional.
Follow these steps to generate the checksum and the optional verification
pattern or hash pattern for a key part.
Select option 4, CHECKSUM, on the ICSF Utilities panel as shown
in Figure 1.
The Checksum and Verification and Hash Pattern panel appears.
See Figure 2.
If you accessed the Random Number Generator panel prior to
this panel, the random numbers that are generated appear automatically
in the Key Value fields.
If you did not use the Random Number Generator panel to generate
random numbers, enter the numbers for which you want to create checksum,
verification pattern, or hash patterns into the key value fields.
Because these will be the key part values you will specify in the
Master Key Entry panels, make sure you record the numbers.
In the Key Type field, specify either:
DES-MK to generate a checksum, hash, and verification pattern
for a 16-byte DES master key part.
DES24-MK to generate a checksum, hash, and verification pattern
for a 24-byte DES master key part.
AES-MK to generate a checksum and verification pattern for an
AES master key part.
RSA-MK to generate a checksum and verification pattern for an
RSA master key part.
ECC-MK to generate a checksum and verification pattern for an
ECC master key part.
If you leave the Key Type field blank and press ENTER, the
Key Type Selection panel appears. See Figure 3.
Type 'S' to the left of the DES-MK key type, and press ENTER to
return to the Checksum and Verification Pattern panel as shown in Figure 4.
In this example, we have selected
the DES-MK master key.
Record the checksum, verification pattern, and hash pattern.
Save these values in a secure place along with the key part values in case you need to reenter
the key values. If the cryptographic feature detects tampering, it clears the master key, and you
have to reenter the same master key again.
Press END to return to the Utilities panel.
Press END again to return to the ICSF Primary menu.
Continue with the appropriate topic for steps to enter the master
key part you have just generated.