Bryan Pendleton wrote:

> Current client  driver supports encrypted userid/password (EUSRIDPWD)
> via the use of DH key-agreement protocol - however current Open Group
> DRDA specifications imposes small prime and base generator values
> (256 bits) that prevents other JCE's  (apt from ibm jce) to be used
> as java cryptography providers.

If it's not too much trouble, can you cite chapter and verse here?

It is in the DDM manual, page 281 and 282.. Section: Generating the shared private key. DRDA's diffie helman agreed public values for prime are 256 bits. The spec gives the public values for the prime, generator and the size of exponent required for DH .
"These values must be used as is to generate  a shared private key."

Hope this helps,
Sunitha.

Reply via email to