Bryan Pendleton wrote:
> Current client driver supports encrypted userid/password (EUSRIDPWD)
> via the use of DH key-agreement protocol - however current Open Group
> DRDA specifications imposes small prime and base generator values
> (256 bits) that prevents other JCE's (apt from ibm jce) to be used
> as java cryptography providers.
If it's not too much trouble, can you cite chapter and verse here?
It is in the DDM manual, page 281 and 282.. Section: Generating the
shared private key.
DRDA's diffie helman agreed public values for prime are 256 bits. The
spec gives the public values for the prime, generator and the size of
exponent required for DH .
"These values must be used as is to generate a shared private key."
Hope this helps,
Sunitha.