content_image/1012678.jpg
128-, and 256 bit support. SHA-1, SHA-2 and SHA3 are shipped enabled on all IBM z15 and do not require the no-charge enablement feature 3863. 

GLYPH<SM590000> For Key Generation: Pseudo-Random Number Generation (PRNG), Deterministic Random Number Generation (DRNG), and True Random number generation (TRNG). 

GLYPH<SM590000> For message authentication code (MAC): Single-key MAC and double-key MAC. 

The total number of cryptographic PCIe adapters (combined Crypto Express7S, Crypto Express6S or Crypto Express5S features) cannot exceed 16 per z15. 

The initial order for Crypto Express7S is two features (two PCIe adapters for FC 0899, four PCIe adapters for FC 0898). After the initial order, the minimum order is one feature. 

Each Crypto Express7S FC 0899 feature contains one PCIe adapter, each Crypto Express7S FC 0898 feature contains one PCIe adapter. The adapter can be in the following configurations: 

GLYPH<SM590000> Common Cryptographic Architecture (CCA) Coprocessor (CEX7C) 

GLYPH<SM590000> Public Key Cryptography Strandards (PKCS) #11 (EP11) Coprocessor (CEX7P) 

GLYPH<SM590000> Accelerator (CEX7A) 

During the feature installation, the PCIe adapter is configured by default as the CCA coprocessor. 

The configuration of the Crypto Express7S adapter as EP11 coprocessor requires a Trusted Key Entry (TKE) workstation Hardware 9.2 (FC 0087 for the rack mounted workstation, FC 0088 for the tower workstation) with TKE 9.2 Licensed Internal Code (FC 0881). 

The Crypto Express7S feature does not use CHPIDs from the channel subsystem pool. However, the Crypto Express7S feature requires one slot in a PCIe I/O drawer, and one physical channel ID (PCHID) for each PCIe cryptographic adapter. 

Table 10-1 summarizes the cryptographic feature codes for z15. 

<img src='content_image/1012678.jpg'>

