Restriction: These services are only available on the IBM zEnterprise EC12 or later servers.
ICSF provides a ciphertext translate callable service. It deciphers encrypted data (ciphertext) under one encryption key and reenciphers it under another key without having the data appear in the clear outside the cryptographic feature. Such a function is useful in a multiple node network, where sensitive data is passed through multiple nodes prior to reaching its final destination. Different nodes use different keys in the process. For more information about different nodes, see Using the Ciphertext Translate2 Callable Service.
The translate keys cannot be used for the encipher and decipher callable services.