ZIP/390
|
|
Compression, Encryption and Delivery of zSeries Files and Reports
|
|
|
|
|
|
Data 21 Cryptographic Facility
|
|
Description
|
|
|
The Data 21 Cryptographic Facility enables users to address a broader range of zSeries centric
encryption applications. This feature can be used with the ZIP/390
Batch Utility (ACTION=ZIP,UNZIP,ENCRYPT,DECRYPT), as well as the ZIPAPI. The Cryptographic Facility
provides (FIPS-197 certified)
AES 128,192,256-bit strong encryption for encrypting mainframe files as well as specific field data
within a file (Credit Card Numbers, SSN Numbers etc.). The cryptographic processing can be performed
using ZIP/390 Software Encryption or with CPACF (CP Assist for Cryptographic Functions)
Hardware Encryption. Multiple encryption modes can be implemented as well. Please review the documentation
for more information.
|
|
FIPS 197 Certified (Cert# 503)
|
|
The Data 21 Cryptographic facility has been certified by the National Institute of Standards
and Technology (NIST) to meet government Federal Information Processing Standards (FIPS-197)
for ensuring secure data communication at Advanced Encryption Standard (AES) levels. FIPS
Publications are issued by the NIST after approval by the Secretary of Commerce pursuant to
Section 5131 of the Information Technology Management Reform Act of 1996 (Public Law 104-106)
and the Computer Security Act of 1987 (Public Law 100-235).
AES is the highest level of encryption available to the public. The encryption algorithm is
used by government agencies (including the United States military) and the private sector
(including financial institutions and medical facilities) and others wanting to protect their
personal or sensitive data from potential threats. Certification of our AES encryption provides
assurance to those customers that the Data 21 Cryptographic Facility meets the government's
rigorous standards.
|
|
Sample OS/390 JCL:
|
|
This sample uses ZIP/390's Cryptographic Facility to encrypt a dataset
with AES Strong Encrypiton. ACTION=DECRYPT must be used to decrypt this
dataset. Please Review all CRYPTO parameters for more information.
New with Release 5.0
Note:
The KEYS are specified in this batch steps below. Normally you would not do
this in production. Various options are available for storing the Keys
securely while using variable substitution in the job itself. Please review
the documentation for more information.
|
|
//ENC2DSN JOB ' ','ENC2DSN',CLASS=A,MSGCLASS=H,MSGLEVEL=(0,0),TIME=1440
//STEP1 EXEC PGM=ZIP390,REGION=0M
//STEPLIB DD DSN=D21LIB.D21Z.LOADLIB,DISP=SHR
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
ACTION=ENCRYPT
MODE=BINARY
IFILE=DSN/ZIP390.FILE1.TXT
ARCHIVE=DSN/ZIP390.FILE1.ENC
CRYPTOFACILITY=ZIP
CRYPTOMETHOD=AES,256
CRYPTOMODE=OFB
CRYPTOIV=00000000000000000000000000000000
CRYPTOKEY=4278b840fb44aaa757c1bf04acbe1a3e
/*
//
|
|
Sample VSE JCL:
|
|
* $$ JOB JNM=ENCRYPT,PRI=1,CLASS=0
* $$ LST FNO=UTIL,CLASS=M
// JOB ENCRYPT
// LIBDEF PHASE,SEARCH=D21LIB.D21Z
// ASSGN SYS060,DISK,VOL=SYSWK1,SHR
// DLBL IFILE,'ZIP.SEQ.FILE1',0,SD
// EXTENT SYS060,SYSWK1,1,0,nnnn,nnnn
// DLBL ARCHIVE,'ZIP.SEQ.FILE2',0,SD
// EXTENT SYS060,SYSWK1,1,0,nnnn,nnnn
// EXEC ZIPVSE,SIZE=ZIPVSE
ACTION=ENCRYPT
MODE=BINARY
IFILE=SEQ/FILE1/27920/80/FB;file1.txt
ARCHIVE=SEQ/ARCHIVE/27920/80/FB;file1.txt
CRYPTOFACILITY=ZIP
CRYPTOMETHOD=AES,128
CRYPTOMODE=OFB
CRYPTOIV=00000000000000000000000000000000
CRYPTOKEY=4278b840fb44aaa757c1bf04acbe1a3e
/*
/&
* $$ EOJ
|
|
Documentation
|
|
|
Literature
|
|
|
|
|
Success Story
|
|
|
|
|
Presentation
|
|
|
|
|
|
|
Reference Guide
|
|
|
|
|
|
|
|
|
|
|
|
ZIP390 is a PKZIP Compatible and WINZIP Compatible mainframe compression product. ZIP, UNZIP and GZIP capabilities are a growing demand for many companies these days. Compression and encryption products for the mainframe can be very costly. Finding a cost efficient applications that runs on z/OS, OS/390, OS390, MVS, VSE, or VSE/ESA is very important. FTP does not show nearly as much value as zip compression. With speedy AES Encryption your data will be kept secure. ZIP Keyword Encryption another form of encryption with our mainframe file compression and mainframe encryption products. We also valuable resources with batch utility and the option of running a zip server with a partner product IpBridge/Connect. Mainframe HIPAA is very important to healthcare companies now. ZIP OS/390, ZIP MVS, ZIP VSE and ZIP OS390 are all important to a business with the interest of keeping its data secure. A variety of products offering zip for the mainframe, we believe ZIP390 is the best. Add PGP Encryption for PGP compatibility for secure mainframe transfer of files. Cyberfusion, ca-xcom, Connect:Direct, Connect:Express, DataBlaster, and File SWEEP/Rapid. ZIP/390's performance as a zip mvs solution has been reported as perfect solution for zip compression and encryption solutions. JIMZip, PowerArchive and ZIPIt are all related to the ZIP Compression Community. PKWARE's Securezip product is an expensive alternative to some of ZIP/390's capabilities and features.
|
|
|
|
