IZ59199: REGRESSION IN AES CRYPT/DECRYPT ON Z/OS

APAR status

• Closed as program error.

Error description

• Error Message: The current IBMJCECCA environment does not
  support encryption using AES keys with size 256.
  .
  Stack Trace: N/A
  .
  This encryption was successful in SDK 5 sr 9 but is regressed in
  SDK 5 sr 10.
  

Local fix

• Remain on SDK 5 sr 9 until SDK 5 sr 11 is available.
  

Problem summary

• SDK 5 SR 10 had an update that regressed support for AES
  encryption/decryption on z/OS.  The incorrect update did
  not call ICSF for AES crypto operations if the HW bits
  for AES were off.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR?
  .
  Do not restrict calls to ICSF for AES crypto operations based on
  the status of HW bits.
  .
  To obtain the fix:
  Install build 20090906 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IZ59200

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSN

     UP