content_image/977554.jpg
<img src='content_image/977554.jpg'>

##  Cryptographic features 

## 6 

This chapter describes the hardware cryptographic functions that are available on IBM z14 ZR1. The CP Assist for Cryptographic Function (CPACF), together with the Peripheral Component Interconnect Express (PCIe) cryptographic coprocessors, offer a balanced use of processing resources and unmatched scalability for fulfilling pervasive encryption demands. 

The z14 ZR1 is designed for delivering a transparent and consumable approach that enables extensive (pervasive) encryption of data in flight and at rest, with the goal of substantially simplifying data security and reducing the costs that are associated with protecting data while achieving compliance mandates. 

This chapter also introduces the principles of cryptography and describes the implementation of cryptography in the hardware and software architecture of IBM Z. It also describes the features that IBM z14 ZR1 offers. Finally, the chapter summarizes the cryptographic features and required software. 

Naming:  The IBM z14 server generation is available as the following machine types and models: 

GLYPH<SM590000> Machine Type 3906 (M/T 3906), Models M01, M02, M03, M04, and M05 →  further identified as IBM z14 Model M0x , or z14 M0x , unless otherwise specified. 

GLYPH<SM590000> Machine Type 3907 (M/T 3907), Model ZR1 →  further identified as IBM z14 Model ZR1 , or z14 ZR1 , unless otherwise specified. 

In the remainder of this chapter, IBM z14 (z14)  refers to both machine types. 

This chapter includes the following topics: 

GLYPH<SM590000> 6.1, “Cryptography enhancements on IBM z14 ZR1” on page 174 

GLYPH<SM590000> 6.2, “Cryptography overview” on page 175 

GLYPH<SM590000> 6.3, “Cryptography on IBM z14 ZR1” on page 179 

GLYPH<SM590000> 6.4, “CP Assist for Cryptographic Functions” on page 182 

GLYPH<SM590000> 6.5, “Crypto Express6S” on page 188 

GLYPH<SM590000> 6.6, “TKE workstation” on page 200 

GLYPH<SM590000> 6.7, “Cryptographic functions comparison” on page 205 

GLYPH<SM590000> 6.8, “Cryptographic operating system support for z14 ZR1” on page 207 

