Usage notes

Edit online

The usage notes for CSNBKGN.

Table 1 shows the valid key type and key form combinations for a single key. Key types marked with an '*' must be requested through the specification of a proper control vector in a key token and through the use of the TOKEN keyword. See also Key forms and types used in the Key Generate verb.
Note: Not all key types are valid on all hardware. See Table 1.

For AES keys, only key form OP is supported. AES keys cannot be generated in pairs.

Table 1. Keywords for Key Generate, valid key types and key forms for a single key

Keywords for Key Generate, valid key types and key forms for a single key
Key Type 1 Key Type 2 OP IM EX
AESDATA Not applicable X
AESTOKEN Not applicable X
DATA Not applicable X X X
DATAC* Not applicable X X X
DATAM Not applicable X X X
DKYGENKY* Not applicable X X X
KEYGENKY* Not applicable X X X
MAC Not applicable X X X
PINGEN Not applicable X X X
Table 2 shows the valid key type and key form combinations for a key pair.
Table 2. Keywords for Key Generate, valid key types and key forms for a key pair

Keywords for Key Generate, valid key types and key forms for a key pair
Key Type 1 Key Type 2 OPEX EXEX OPIM, OPOP, IMIM IMEX
CIPHER CIPHER X X X X
CIPHER DECIPHER X X X X
CIPHER ENCIPHER X X X X
CVARDEC* CVARENC* E E
CVARDECC* CVARPINE* E E
CVARENC* CVARDEC* E E
CVARENC* CVARXCVL* E E
CVARENC* CVARXCVR* E E
CVARXCVL* CVARENC* E E
CVARXCVR* CVARENC* E E
CVARPINE* CVARDEC* E E
DATA DATA X X X X
DATA DATAXLAT X X   X
DATAC* DATAC* X X X X
DATAM DATAM X X X X
DATAM DATAMV X X X X
DATAXLAT DATAXLAT X X   X
DECIPHER CIPHER X X X X
DECIPHER ENCIPHER X X X X
DKYGENKY* DKYGENKY* X X X X
ENCIPHER CIPHER X X X X
ENCIPHER DECIPHER X X X X
EXPORTER IKEYXLAT X X   X
EXPORTER IMPORTER X X   X
IKEYXLAT EXPORTER X X   X
IKEYXLAT OKEYXLAT X X   X
IMPORTER EXPORTER X X   X
IMPORTER OKEYXLAT X X   X
IPINENC OPINENC X X E X
KEYGENKY* KEYGENKY* X X X X
MAC MAC X X X X
MAC MACVER X X X X
OKEYXLAT IKEYXLAT X X   X
OKEYXLAT IMPORTER X X   X
OPINENC IPINENC X X E X
OPINENC OPINENC X
PINVER PINGEN X X   X
PINGEN PINVER X X   X
Note:
  1. AES keys cannot be generated in pairs.
  2. An 'X' indicates a permissible key type combination for a given key form. An 'E' indicates that a special (Extended) command is required as those keys require special handling.
  3. The key types marked with an '*' must be requested through the specification of a proper control vector in a key token and the use of the TOKEN keyword.