ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzajc_5.4.0.1/rzajccreatekeys.htm

86 lines
6.3 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Create DES and PKA keys" />
<meta name="abstract" content="You can create DES and PKA keys and store them in a DES key store." />
<meta name="description" content="You can create DES and PKA keys and store them in a DES key store." />
<meta name="DC.Relation" scheme="URI" content="rzajcworking.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajckeygentxt.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajcpkakeygentxt.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajclogging.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajcciphering.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajcworkpin.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajcsignfile.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajcinitialstore.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="createkeys" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Create DES and PKA keys</title>
</head>
<body id="createkeys"><a name="createkeys"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Create DES and PKA keys</h1>
<div><p>You can create DES and PKA keys and store them in a DES key store.</p>
<div class="p">You can use your Cryptographic Coprocessor to create two types of cryptographic
keys. <ul><li>Data Encryption Standard (DES) keys base their content on a symmetric
algorithm. This means that cryptography uses the same key value to encrypt
and decrypt data. Use DES keys to encrypting or decrypting files, working
with PINS, and managing keys. <p>To create DES keys with your Cryptographic
Coprocessor, write a program.</p>
</li>
<li>Public key algorithm (PKA) keys base their content on an asymmetric algorithm,
meaning that cryptography uses different keys for encryption and decryption.
Use PKA keys for signing files with digital signatures and for managing keys. <p>To
create PKA keys with your Cryptographic Coprocessor, write a program.</p>
</li>
</ul>
</div>
<div class="note"><span class="notetitle">Note:</span> If you choose to use the program examples provided, change them to suit
your specific needs. For security reasons, IBM<sup>®</sup> recommends that you individualize these
program examples rather than using the default values provided.</div>
<p>Store your DES and PKA keys in the key store file you created for them
using a key store file.You can also store PKA keys in your Cryptographic Coprocessor.
See the information at <a href="http://www.ibm.com/security/cryptocards/library.shtml" target="_blank">http://www.ibm.com/security/cryptocards/library.shtml</a><img src="www.gif" alt="Link outside Information Center" /> for more information on storing your keys in the hardware.</p>
<div class="note"><span class="notetitle">Note:</span> Read the <a href="codedisclaimer.htm#codedisclaimer">Code license and disclaimer information</a> for
important legal information.</div>
</div>
<div>
<ul class="ullinks">
<li class="ulchildlink"><strong><a href="rzajckeygentxt.htm">Example: Creating a DES key with your Cryptographic Coprocessor</a></strong><br />
Change this program example to suit your needs for creating a DES key with your Cryptographic Coprocessor.</li>
<li class="ulchildlink"><strong><a href="rzajcpkakeygentxt.htm">Example: Creating a PKA key with your Cryptographic Coprocessor</a></strong><br />
Change this program example to suit your needs for creating a PKA key with your Cryptographic Coprocessor</li>
</ul>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajcworking.htm" title="After you set up your Cryptographic Coprocessor, you can begin writing programs to make use of your Cryptographic Coprocessor's cryptographic functions.">Manage the Cryptographic Coprocessor</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzajclogging.htm" title="You can log on or off the Cryptographic Coprocessor by working with role-restricted APIs.">Log on or off of the Cryptographic Coprocessor</a></div>
<div><a href="rzajcsignfile.htm" title="You can protect data from undetected changes by including a proof of identity value called a digital signature.">Generate and verify a digital signature</a></div>
<div><a href="rzajcinitialstore.htm" title="A key store file is a database file that stores operational keys, i.e. keys encrypted under the master key. Read this information if you plan to keep records of your DES and PKA keys.">Initialize a key store file</a></div>
</div>
<div class="reltasks"><strong>Related tasks</strong><br />
<div><a href="rzajcworkpin.htm" title="A financial institution uses personal identification numbers (PINs) to authorize personal financial transactions for its customers. A PIN is similar to a password except that a PIN consists of decimal digits and is normally a cryptographic function of an associated account number. You can use your Cryptographic Coprocessor to work with PINs.">Work with PINs</a></div>
</div>
<div class="relinfo"><strong>Related information</strong><br />
<div><a href="rzajcciphering.htm" target="_blank">Encrypt or decrypt a file</a></div>
</div>
</div>
</body>
</html>