Required commands
The CSNBCTT2 required commands.
This verb requires the following commands to be enabled in the active role:
| Command | Offset | Description |
|---|---|---|
| Cipher Text Translate2 | X'01C0' | Enable the Ciphertext Translate2 service |
| Cipher Text Translate2 - Allow translate from AES to TDES | X'01C1' | Allow translation from an AES key to 2 or 3 key triple DES key. |
| Cipher Text Translate2 - Allow translate to weaker AES | X'01C2' | Allow translation from a stronger to weaker AES key. (For example, IN key AES256 and OUT key AES128.) |
| Cipher Text Translate2 - Allow translate to weaker DES | X'01C3' | Allow translation from a triple-length DES key to a weaker double-length DES key. |
| Cipher Text Translate2 - Allow only cipher text translate types | X'01C4' | When enabled, the verb only accepts these key-translation-only key types, which cannot be
used in normal cipher or MAC data operations:
In other words, with offset X'01C4' enabled in the active role, AES key type AESDATA and DES key types CIPHER, DATA, DATAC, and ENCIPHER, are not allowed. This restricts the verb from using keys that can be used in data operations other than translation. |