Required commands

The CSNBCTT2 required commands.

This verb requires the following commands to be enabled in the active role:

Required commands for the Cipher Text Translate2 verb

Command Offset Description
Cipher Text Translate2 X'01C0' Enable the Ciphertext Translate2 service
Cipher Text Translate2 - Allow translate from AES to TDES X'01C1' Allow translation from an AES key to 2 or 3 key triple DES key.
Cipher Text Translate2 - Allow translate to weaker AES X'01C2' Allow translation from a stronger to weaker AES key. (For example, IN key AES256 and OUT key AES128.)
Cipher Text Translate2 - Allow translate to weaker DES X'01C3' Allow translation from a triple-length DES key to a weaker double-length DES key.
Cipher Text Translate2 - Allow only cipher text translate types X'01C4' When enabled, the verb only accepts these key-translation-only key types, which cannot be used in normal cipher or MAC data operations:
  • AES key tokens with key type CIPHER and key usage set to allow data translate (C-XLATE) only
  • DES key tokens with a key type CIPHERXI, CIPHERXO, or CIPHERXL

In other words, with offset X'01C4' enabled in the active role, AES key type AESDATA and DES key types CIPHER, DATA, DATAC, and ENCIPHER, are not allowed. This restricts the verb from using keys that can be used in data operations other than translation.