Skip to main content

IBM jCCA

Java API for CCA

Introduction

The IBM Java API for CCA (jCCA) package consist of a Java Framework, which gives access to use all the Cryptographic services available in the IBM hardware from Java.

Applications built using jCCA are scalable from small to large platforms. jCCA relieves application programmers of the burden of programming secure applications for different platforms and makes it possible to move applications almost unchanged from the smallest of Workstation to the largest available Mainframe.

jCCA makes it possible to use cryptographic hardware which supports IBM's Common Cryptographic Architecture (CCA) API. Using Cryptographic hardware for secure applications do not only ensure the protection of cryptographic keys it also optimizes the cryptographic performance.

jCCA can also be used for applications running in the IBM Websphere server environment.

jCCA framework highlights:

Advantages

Secure

By using the IBM jCCA package it is possible to create high-security applications in Java, which normally would require COBOL, PL/I, C or C++.

IBM jCCA provides state of the art Cryptography to applications across platforms and gives application scalability a new dimension.

Flexible

IBM jCCA covers a wide range of IBM platforms, and thus ensures that investments in development of secure applications can be utilized cost effectively for both a low and a high volume of transactions.

Generally there is only very limited java support in IBM 4764 and IBM 4765 Cryptographic Coprocessors and on the System z platform the access to Cryptographic Hardware is only supported through Java Cryptographic Architecture (JCA). IBM jCCA provides direct and unlimited support to the Cryptographic Hardware functions of CCA (for instance Financial PIN functions) which never will become accessible through JCA. IBM jCCA covers a wide range of IBM platforms, and thus ensures that investments in development of secure applications can be utilized cost effectively for both a low and a high volume of transactions.

User friendly solution

The interface provided by jCCA is consistent across all platforms. The application programmers only have to learn one interface to CCA. The differences in CCA between for example 31 bits and 64 bits verbs on the z/OS platform are handled by IBM jCCA so that the application programmers only need to know the jCCA Java API.

Supported Environments

1. Supports ALL CCA verbs present in CCA version 3.30+ for IBM 4764 PCIx model 001 on the following operating systems:

System x platforms:

  1. Microsoft Windows XP/Server 2003 (32bit)
  2. Linux SUSE (SLES) 10+ (32 bit)

System p platforms:

  1. IBM AIX version 5.3+ (32bit) –System p platform
  2. IBM AIX version 6.1+ (32bit)

2. Supports ALL CCA verbs present in CCA version 4.1+ for IBM 4765 PCIe model 001 on the following operating systems:

System x platforms:

  1. Linux RedHat Enterprise 6.1) 10+ (32 bit/*64bit)
  2. Linux SUSE (SLES) 10+ (32 bit/*64bit)

*64 bit only available through CCA Extended Platform Support.

System p platforms:

  1. IBM AIX version 6.1+ (32bit)
  2. IBM AIX version 7.1+ (32bit)
  3. IBM i os 5/6/7

3. Supports ALL ICSF/CCA verbs present in Integrated Cryptographic System Facility (ICSF) on the following z/OS operating system versions:

System z platforms:

  1. zOS 1.11 (31/64bit) - FMID HCR7770* and HCR7780*.
  2. zOS 1.12 (31/64bit) - FMID HCR7770*, HCR7780* and HCR7790*.
  3. zOS 1.13 (31/64bit) - FMID HCR7770*, HCR7780* and HCR7790*.

*) Current version of jCCA 1.6.2 includes all ICSF services included in HCR7790, but can be used at HCR7770 and newer levels.

4. Supports ALL CCA verbs on zLinux for CCA version 4.0 CCA drivers implemented for the IBM 4764 (CEX2C) cryptographic hardware on the following operating systems:

System z platforms:

  1. zLinux SUSE 11 (64bit)
  2. zLinux RedHat 6 (64bit)

Limitations

  1. jCCA only supports operation systems which are supported by IBM Cryptographic Hardware drivers in appropriate environments. For IBM 4764/IBM 4765 this currently only includes 32bit platforms.
  2. The 64bit support requires a 64bit JVM.

Maintenance

  1. CCCC provides support for IBM Java API for CCA. Maintenance includes fixes and access to new releases whenever available.
  2. IBM CCCC has encryption and security experts which can advice and support on all levels.

Need More Info?

For more information, contact

Ready to buy?

Contact your local IBM representative or the IBM Crypto Competence Center Copenhagen directly at