Security Comparison

Table 1 compares CPACF clear key, CPACF protected key, and Crypto Express6S/7S/8S security.

Table 1. Comparison between the security and Cryptos
	CPACF clear key	CPACF protected key	Crypto Express7S/8S
Security of keys	Low: Keys are not encrypted in storage and when sent to CPACF for use.	Medium: Keys are stored in the key repository as secure keys, encrypted under the appropriate master key. When used as a protected key, the key material is decrypted from under the master key and re-encrypted under a wrapping key.	High: Keys are protected by encryption at all times, and hardware has tamper sensors and zeroizes keys when tampering is detected.
Functions provided	Basic symmetric key with additional chaining options, and hashing and MACs functions.	Basic symmetric key with additional chaining options, and hashing and MACs functions.	Full CCA and EP11 function set including symmetric and public-key cryptography and key management, hashing, special banking and finance functions, and others.