Import a Clear Key Value

You can supply a clear key value on a control statement for KGUP to import.

These statements show the syntax when you supply a clear key value to KGUP.

Note: For these control statements, your system should be in special secure mode.

When you supply a single-length, clear key value:

   ADD or UPDATE  LABEL(label)    TYPE(data,exporter,importer,
   mac,macver, or any PIN key)  CLEAR  KEY(key-value)

When you supply a double-length, clear key value:

   ADD or UPDATE  LABEL(label)  TYPE(data,datam,datamv,exporter,importer,
   or any PIN key)  CLEAR  KEY(key-value, key-value)

When you supply a triple-length, clear key value:

   ADD or UPDATE  LABEL(label)  TYPE(data),
   CLEAR  KEY(key-value, key-value, key-value)

When you supply a single-length clear key value and you use the key to exchange keys with a cryptographic product that does not use control vectors or double-length keys:

   ADD or UPDATE  LABEL(label)  TYPE(exporter or importer),
   CLEAR  KEY(key-value)  NOCV

When you supply a double-length, clear key value, and you use the key to exchange keys with a cryptographic product that does not use control vectors:

   ADD or UPDATE  LABEL(label)  TYPE(exporter or importer),
   CLEAR  KEY(key-value,ikey-value)  NOCV

Import a Clear Key Value for AES keys: You can supply a clear key value on a control statement for KGUP to import.

When you supply a 128-bit, clear key value for an AES DATA key:

   ADD or UPDATE  LABEL(label)  TYPE(data) ALGORITHM(AES),
   CLEAR KEY(key-value,key-value)

When you supply a 196-bit, clear key value for an AES key that uses the variable-length token:

    ADD or UPDATE LABEL(label) TYPE(cipher, exporter, or importer), 
    ALGORITHM(AES) CLEAR KEY(key-value,key-value)

CLRDES and CLRAES key types: The CLEAR keyword is not allowed because the key type indicates that the KEY is a clear key value. Also, special secure mode is not required for these key types.

   ADD or UPDATE LABEL(label) TYPE(clraes), 
   KEY(key-value, key-value)

   ADD or UPDATE LABEL(label) TYPE(clrdes), 
   KEY(key-value, key-value)