Encryption Facility for OpenPGP

Encryption Facility for OpenPGP can encrypt and decrypt z/OS-type data for use with OpenPGP-compliant systems as well as OpenPGP-compliant messages and files. It includes, but is not limited to the following support:
  • Passphrase base encryption of session key.
  • Digital signatures of data.
  • Importing/exporting of OpenPGP certificates (V3 and V4 for importing, only export V4, unless exporting an imported V3 key).
  • RSA (1), ElGamal, and DSA (1) key generation.
  • Use of partial data packets.
  • ASCII Armor for OpenPGP certificates.
  • Data encryption with a randomly generated symmetric session key using AES 128 (1), 192, and 256 bit keys, Triple-DES (1), and Blowfish algorithms (2).
  • Symmetric encryption of randomly generated symmetric session key using AES 128 (1), 192, and 256 bit keys, Triple-DES (1), and Blowfish algorithms (2).
  • Asymmetric encryption of randomly generated symmetric keys using RSA (1) and ElGamal algorithms.
  • Compression using ZIP and ZLIB algorithms.
  • zEDC support for hardware compression.
  • Digest/Hash using SHA-1 (1), MD5 (1), MD2 (1), SHA-256 (1), SHA-384, SHA-512 algorithms.
  • Digital Signature using DSA with SHA1 (1) and RSA (with all supported hashes) (1) algorithm.
For complete information, see IBM Encryption Facility for z/OS: Using Encryption Facility for OpenPGP.