>>Under no circumstances will Crypto Copressors be used for Ciphers and Macs.
But, what about Crypto as accelerator? AFAIK, Openssh use SystemSSL, and System SSL can use crypto accelerators. El jue, 28 ago 2025, 21:31, Kirk Wolf <[email protected]> escribió: > FYI, > > If you have -v (debug1) enabled, you will see something like this when > starting the connection: > > debug1(): cipher_init: aes128-ctr from source CPACF, used in non-FIPS mode > ... > debug1(): mac_setup_by_alg: hmac-sha2-256 from source CPACF, used in > non-FIPS mode > > > Kirk Wolf > Dovetailed Technologies > https://coztoolkit.com > > On Thu, Aug 28, 2025, at 2:25 PM, Kirk Wolf wrote: > > For Ciphers and (H)Macs, IBM z/OS OpenSSH (not the sftp component) will > use either > > > > a) CPACF instructions, for the popular Ciphers and MACs > > > > b) ICSF calls (an ICSF uses CPACF where it can). CPACF instructions are > GP instructions. > > > > c) unassisted algorithms in OpenSSH/LibreSSL code. CPACF (the > default) is the fastest, followed by ICSF, followed by software algs. > > > > Under no circumstances will Crypto Copressors be used for Ciphers and > Macs. > > > > See the IBM z/OS OpenSSH User's Guide for more details. See "Ciphers" > and "MACs" options as well as CiphersSource and MACsSource options for ssh > and sshd. > > > > Kirk Wolf > > Dovetailed Technologies > > https://coztoolkit.com > > > > On Tue, Aug 26, 2025, at 10:50 AM, Steve Beaver wrote: > > > Because I don't know, > > > > > > > > > > > > Using SFTP under BPX on zOS. Do those Cyphers use the > CRYPTO-Coprocessors > > > or do they only use the GP's? > > > > > > > > > > > > TIA > > > > > > > > > > > > Steve > > > > > > > > > ---------------------------------------------------------------------- > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO IBM-MAIN > > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
