z/OS Cryptographic Services ICSF Application Programmer's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


User Derived Key (CSFUDK and CSFUDK6)

z/OS Cryptographic Services ICSF Application Programmer's Guide
SA22-7522-16

This callable service is not supported on an IBM eServer zSeries 990, IBM eServer zSeries 890, z9 EC and z9 BC, z10 EC and z10 BC. Diversifed key generate callable service can be used to perform this processing.

Use the user derived key callable service to generate a single-length or double-length MAC key or to update an existing user derived key. A single-length MAC key can be used to compute a MAC following the ANSI X9.9, ANSI X9.19, or the Europay, MasterCard and VISA (EMV) Specification MAC processing rules. A double-length MAC key can be used to compute a MAC following either the ANSI X9.19 optional double MAC processing rule or the EMV Specification MAC processing rule.

This service updates an existing user derived key by XORing it with data you supply in the data_array parameter. This is called SESSION MAC key generation by VISA.

This service adjusts the user derived key or SESSION MAC key to odd parity. The parity of the supplied derivation key is not tested.

The callable service name for AMODE(64) invocation is CSFUDK6.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014