IBM Support

When encrypting data, how does VTAM deal with plaintext data that is not a multiple of 8 bytes in length?

Question & Answer


Question

According to the ICSF (Integrated Cryptographic Services Facility) manual, when CBC (cipher block chaining) mode is used for encryption, plaintext to be encrypted must be a multiple of 8 bytes. When sending data from the application to ICSF, how does VTAM deal with data that is not a multiple of 8 bytes?

Answer

VTAM automatically pads the plaintext data as appropriate to make it a multiple of 8 bytes.

The padding is independent of the value of the ENCRYPTN option.

VTAM uses random data derived from the TOD clock for padding. The last byte of the padding data is always the total length of the padding data field.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSSN3L","label":"z\/OS Communications Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

ZOSCS COMMSERVER

Document Information

Modified date:
19 October 2015

UID

dwa1233952