Enciphering and deciphering data

The encipher and decipher callable services protect data off the host. ICSF protects sensitive data from disclosure to people who do not have authority to access it. Using algorithms that make it difficult and expensive for an unauthorized user to derive the original clear data within a practical time period assures privacy.

To protect data, ICSF can use the Data Encryption Standard (DES) algorithm or the Advanced Encryption Standard (AES) algorithm to encipher or decipher data or keys. The DES algorithm is documented in Federal Information Processing Standard #46. The AES algorithm is documented in Federal Information Processing Standard #197.

These services can be used to protect data:

• Decipher callable service (CSNBDEC, CSNBDEC1, CSNEDEC and CSNEDEC1)

  The decipher callable service uses encrypted DES data-encrypting keys to decipher data.

• Encipher callable service (CSNBENC, CSNBENC1, CSNEENC and CSNEENC1)

  The encipher callable service uses encrypted DES data-encrypting keys to encipher data.

• Field Level Decipher (CSNBFLD and CSNEFLD)

  The Field Level Decipher callable service decrypts payment related database fields that have been previously encrypted using the field level encipher callable service.

• Field Level Encipher (CSNBFLE and CSNEFLE)

  The Field Level Encipher callable service encrypts payment related database fields, preserving the format of the fields.

• Symmetric Algorithm Decipher callable service (CSNBSAD, CSNBSAD1, CSNESAD and CSNESAD1)

  The Symmetric Algorithm Decipher callable service uses encrypted AES data-encrypting keys to decipher data.

• Symmetric Algorithm Encipher callable service (CSNBSAE, CSNBSAE1, CSNESAE and CSNESAE1)

  The Symmetric Algorithm Encipher callable service uses encrypted AES data-encrypting keys to encipher data.

• Symmetric Key Decipher callable service (CSNBSYD, CSNBSYD1, CSNESYD and CSNESYD1)

  The Symmetric Key Decipher callable service uses clear and encrypted AES and DES data-encrypting keys to decipher data.

• Symmetric Key Encipher callable service (CSNBSYE, CSNBSYE1, CSNESYE and CSNESYE1)

  The Symmetric Key Encipher callable service uses clear and encrypted AES and DES data-encrypting keys to encipher data.