z/OS Cryptographic Services ICSF Application Programmer's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


ECB Wrapping of DES Keys (Original Method)

z/OS Cryptographic Services ICSF Application Programmer's Guide
SA22-7522-16

The wrapping of a double-length key (*K) using a double-length *KEK is defined as follows:

 e*KEK(KL) || e*KEK(KR) = eKEKL(dKEKR(eKEKL(KL))) || eKEKL(dKEKR(eKEKL(KR))) 

Where:

  • KL is the left 64 bits of *K.
  • KR is the right 64 bits of *K.
  • KEKL is the left 64 bits of *KEK.
  • KEKR is the right 64 bits of *KEK.
  • || means concatenation

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014