Key-generating keys are used to derive unique-key-per transaction
keys.
Table 1. DES key-generating keys| DES keys |
Callable services |
|---|
Key-generate key class:- These keys are used to derive keys.
- The keys are double-length keys.
- The key usage flags in the control vector determine which services
the KEYGENKY key may be used with.
|
| KEYGENKY |
Diversified Key Generate, Encrypted PIN Translate,
Encrypted PIN Verify, Unique Key Derive |
| DKYGENKY |
Diversified Key Generate, PIN Change/Unblock |
Table 2. AES key-generating keys| AES keys |
Callable services |
|---|
Key-generate key class:- These keys are used to derive keys.
- The keys can be 128, 192, or 256 bits in length.
|
| DKYGENKY |
Diversified Key Generate2 |
Availability notes: AES key-generating
class keys require z114 or z196 systems with a CEX3C coprocessor with
the November 2013 or later licensed internal code, or zEC12, zBC12,
and later systems with a CEX3C, CEX4C, or later coprocessor with September
2013 or later licensed internal code.