IBM PCI Cryptographic Coprocessor

Release 2.41 is available for download for all IBM 4758 Model 002 and 023 customers who use Windows 2000®, Windows NT®, and customers who use AIX with pSeries features #4958 and #4963. Release 2.41 provides additional function and performance for all customers and fixes problems encountered with the earlier releases.

Highlights of the new and additional support for CCA include:

• New capabilities have been added to the Key Part Import verb permitting improved separation of function between individuals and defense against unauthorized clear-key modification.
• The rules applying to key-length during import and export of DES keys have been tightened. The old rules can be used provided new access control points are authorized.
• Host-side key-storage key-caching can now be disabled enabling those who access the same keys from multiple processes to immediately work with updated keys.
• Support of the IBM 3624 PIN-generation method is added to the Encrypted PIN Generate verb.
• The Encrypted PIN Verify verb can optionally enforce that verified PINs are four digits in length when using the VISA-PVV PIN calculation method.
• The PKA Key Token Change verb is modified to give return and reason codes zero when requested to update a public-key-only record.
• Fixes have been applied to the Diversified Key Generate, Encrypted PIN Generate, Encrypted PIN Verify, Key Token Change, and DES Key Record Create verbs.
• New device drivers for AIX for 32-bit and 64-bit environments are supplied.
• Multi-threaded support for multiple Coprocessors on Windows NT and Windows 2000 has been improved.
• The Cryptographic Node Management (CNM) utility is modified to permit only 1024-bit length keys. You still can write applications to employ keys up to 2048-bit lengths.
• The diagnostic trace facility has been removed from the host component.

Highlights of the new and additional support for PKCS #11 include:

• Relative key length restrictions have been added to C_WrapKey when wrapping one secret key with another secret key.
• New device drivers for AIX for 32-bit and 64-bit environments are supplied.

See Release 2.40 for enhancements in the earlier release.