JCL examples for CSDFILDE

Example 1: In this example CSDFILDE reads data from a DASD data set named PARTNER.XYZ.ENCDATA. It writes the decrypted data to a DASD data set named PARTNER.XYZ.INVENTORY, which did not previously exist. The system creates and catalogs the data set. All of the defaults are used for the SYSIN options. Because the original data has been encrypted with a CLRTDES key that is protected with an RSA private key and the RSA key label is available in the header, you do not need to specify RSA= if the PKDS of the decrypting system contains the same RSA private key stored with the same label.

//DECRYPT EXEC PGM=CSDFILDE
//SYSPRINT DD SYSOUT=* 
//SYSUT1 DD DSN=PARTNER.XYZ.ENCDATA,DISP=SHR 
//SYSUT2 DD DSN=PARTNER.XYZ.INVENTORY, 
//          UNIT=SYSDA,DISP=(NEW,CATLG),
//          SPACE=(1024,(60,10)),AVGREC=K
//SYSIN DD *
/*
//

Example 2: In this example CSDFILDE reads encrypted data from an IBM® standard labeled tape data set that is named XYZ.FILE.ARCHIV. The data set is also a cataloged data set. CSDFILDE writes the decrypted data to a new tape data set XYZ.DATA, on volume serial ARCHIV. This data set is added to the system catalog. Because the original clear data was encrypted using PASSWORD, you must specify the same password as input to the CSDFILDE program. The program retrieves the iteration count and salt value used by CSDFILDE from the header record that is contained in the SYSUT1 input file. It uses those values along with the password to recover the clear key for decryption:

//DECRYPT2 EXEC PGM=CSDFILDE
//SYSPRINT DD SYSOUT=* 
//SYSUT1 DD UNIT=3590,DSN=XYZ.FILE.ARCHIVE,DISP=OLD
//SYSUT2 DD UNIT=3590,DISP=(NEW,CATLG),VOL=SER=ARCHIV,
//          DSN=XYZ.DATA
//SYSIN DD *
PASSWORD=ASK NOT FOR WHOM THE BELL TOLLS
/*
//

Example 3: In this example CSDFILDE reads data from a z/OS® UNIX Systems Services file named /u/Lab/encdata/partner3. It writes the decrypted data to an existing data set, PARTNER3.INVENTORY, on a 3390 DASD volume named CSDUS1. The original clear data has been encrypted with a key that is protected by an RSA public key. The RSA private key that corresponds to the public key is stored in the PKDS of this system with the label MY.PRIV.2048.KEY. Because this label is different from the label of the RSA public key that has been used for encryption, you must specify the label of the private key for RSA as input to the CSDFILDE program.

//DECRYPT3 EXEC PGM=CSDFILDE
//SYSPRINT DD SYSOUT=* 
//SYSUT1 DD PATH='/u/Lab/encdata/partner3',PATHOPTS=ORDONLY
//SYSUT2 DD DSN=PARTNER3.INVENTORY, 
//          UNIT=3390,VOL=SER=CSDUS1,DISP=OLD
//SYSIN DD *
RSA=MY.PRIV.2048.KEY
/*
//