Functions of symmetric cryptographic keys

ICSF provides functions to create, import, and export AES, DES, and HMAC keys. This topic gives an overview of these cryptographic keys. Detailed information about how ICSF organizes and protects keys is in z/OS Cryptographic Services ICSF Administrator's Guide.

ICSF supports two formats of symmetric key tokens: fixed-length and variable-length. In fixed-length format key tokens, key type and usage are defined by the control vector. In variable-length format key tokens, the key type and usage are defined in the associated data section. The control vector and associated data section are cryptographically bound to the encrypted key value in the token.