Contents of the report

The data shown for cryptographic coprocessors and accelerators always reflects the total activity in your CPC and the partition activity, while the data shown for ICSF services is for the partition. If measurement data for one of the cryptographic features is not available, the corresponding report section is omitted.

Figure 1. Crypto Hardware Activity Report


                                           C R Y P T O  H A R D W A R E  A C T I V I T Y         
                                                                                                                           PAGE    1
            z/OS V2R3                SYSTEM ID TRX2             DATE 02/01/2017            INTERVAL 14.59.998              
                                     RPT VERSION V2R3 RMF       TIME 11.00.00              CYCLE 1.000 SECONDS    
         
-------- CRYPTOGRAPHIC CCA COPROCESSOR -------------------------------------------------                                            
           -------- LPAR ---------  --------- CPC ---------  --- LPAR ---   ---- CPC ---                                            
TYPE   ID   RATE  EXEC TIME  UTIL%   RATE  EXEC TIME  UTIL%  KEY-GEN RATE   KEY-GEN RATE                                            
CEX5C   0   0.00    0.000     0.0    0.00    0.000     0.0       0.00           0.00                                                
        1   1997    0.209    41.7    4873    0.205    99.8       0.86           0.86                                                
CEX6C   5   4290    0.092    39.4    9009    0.111    99.6       3.52           3.52                                                
        6   4349    0.091    39.4    9138    0.109    99.5       3.83           3.83                                                
        7   4352    0.090    39.3    9144    0.109    99.5       3.61           3.61                                                
        8   4362    0.090    39.4    9165    0.109    99.5       4.05           4.05                                                
        9   0.00    0.000     0.0    0.00    0.000     0.0       0.00           0.00                                                
       10   0.00    0.000     0.0    0.00    0.000     0.0       0.00           0.00                                                
       11   0.00    0.000     0.0    0.00    0.000     0.0       0.00           0.00                                                
       12   0.00    0.000     0.0    0.00    0.000     0.0       0.00           0.00                                                
                                                                                                                                    
-------- CRYPTOGRAPHIC PKCS11 COPROCESSOR -----------------------------------------------------------------------------------       
           -------- LPAR ---------  --------- CPC ---------                  --------- LPAR --------  --------- CPC ---------       
TYPE   ID   RATE  EXEC TIME  UTIL%   RATE  EXEC TIME  UTIL%  FUNCTION         RATE  EXEC TIME  UTIL%   RATE  EXEC TIME  UTIL%       
CEX5P   3  461.8    1.004    46.4    1005    0.995    99.9   ASYM FAST       253.8    0.947    24.0   470.4    1.009    47.5      
                                                             ASYM GEN         0.00    0.000     0.0    0.38    2.067     0.1     
                                                             ASYM SLOW       186.5    1.081    20.2   491.6    1.011    49.7     
                                                             SYMM COMPLETE   21.48    1.012     2.2   42.52    0.638     2.7     
                                                             SYMM PARTIAL     0.00    0.000     0.0    0.00    0.000     0.0     
                                                                                                                                 
-------- CRYPTOGRAPHIC ACCELERATOR ------------------------------------------------------------------------------------------    
           -------- LPAR ---------  --------- CPC ---------                  --------- LPAR --------  --------- CPC ---------    
TYPE   ID   RATE  EXEC TIME  UTIL%   RATE  EXEC TIME  UTIL%  FUNCTION         RATE  EXEC TIME  UTIL%   RATE  EXEC TIME  UTIL%    
CEX5A   2                           15043    0.066    99.7   RSA ME   1024                             1538    0.031     4.8     
                                                             RSA ME   2048                             5965    0.026    15.6     
                                                             RSA ME   4096                             2524    0.064    16.3     
                                                             RSA CRT  1024                             4382    0.042    18.2     
                                                             RSA CRT  2048                            246.2    0.207     5.1     
                                                             RSA CRT  4096                            387.8    1.025    39.7     
                                                                                                                                 
-------- ICSF SERVICES -------------------------------------------------------------------------------------------------         
        ---- ENCRYPTION -----    ---- DECRYPTION -----    -------- HASH ---------    ------ PIN -------                          
         SDES    TDES     AES     SDES    TDES     AES    SHA-1  SHA-256  SHA-512    TRANSLATE   VERIFY                          
RATE     2399    1557    0.00     0.00    0.00    0.00      192K    0.00     0.00         0.00     0.00                          
SIZE     2622    5057    0.00     0.00    0.00    0.00     9393     0.00     0.00                                                
        ----- MAC ------    ---- AES MAC ---    --- RSA DSIG ---    --- ECC DSIG ---    - FORMAT PRESERVING ENCRYPTION -         
        GENERATE  VERIFY    GENERATE  VERIFY    GENERATE  VERIFY    GENERATE  VERIFY    ENCIPHER   DECIPHER    TRANSLATE   
RATE       158.6    0.00        0.00    0.00        2753    1734        0.00    0.00        0.00       0.00         0.00      
SIZE        9545    0.00        0.00    0.00                                                0.00       0.00         0.00     
        --- QSA DSIG ---  -- FEISTEL-BASED ENCRYPTION  --        
        GENERATE  VERIFY  ENCIPHER   DECIPHER    TRANSLATE   
RATE       158.6    0.00      0.00       0.00         0.00      
SIZE                          0.00       0.00         0.00

Table 1. Fields in the CRYPTO Hardware Activity Report
Field Heading	Meaning
Cryptographic accelerator or coprocessor performance data reflecting the CPC activity is reported in blocks which are labeled with CPC. Cryptographic accelerator or coprocessor performance data reflecting the partition activity is reported in blocks which are labeled with LPAR.
Cryptographic CCA Coprocessor
TYPE	Type that defines the cryptographic CCA coprocessor: Type Meaning CEX2C Crypto Express2 Coprocessor. CEX3C Crypto Express3 Coprocessor. CEX4C Crypto Express4S Coprocessor. CEX5C Crypto Express5S Coprocessor. CEX6C Crypto Express6S Coprocessor. CEX7C Crypto Express7S Coprocessor.
ID	Index that specifies the cryptographic CCA coprocessor.
CPC /LPAR	RATE Rate of all operations on this cryptographic coprocessor. EXEC TIME Average execution time (milliseconds) of all operations on this cryptographic coprocessor. UTIL% Total utilization percentage of this coprocessor.
CPC /LPAR KEY-GEN RATE	Rate for RSA-key-generation operations.
Cryptographic PKCS11 Coprocessor
TYPE	Type that defines the cryptographic PKCS11 coprocessor: Type Meaning CEX4P Crypto Express4S PKCS11 Coprocessor. CEX5P Crypto Express5S PKCS11 Coprocessor. CEX6P Crypto Express6S PKCS11 Coprocessor. CEX7P Crypto Express7S PKCS11 Coprocessor.
ID	Index that specifies the cryptographic PKCS11 coprocessor.
CPC /LPAR	Rate, average execution time (in milliseconds) and utilization percentage for all operations executed on this cryptographic PKCS11 coprocessor.
CPC /LPAR FUNCTION	Rate, average execution time (in milliseconds) and utilization percentage for executed operations, categorized by cryptographic function type: Type Meaning ASYM FAST Fast asymmetric-key function. ASYM GEN Asymmetric-key generation function. ASYM SLOW Slow asymmetric-key function. SYMM COMPLETE Symmetric-key function that returns a complete or final result. SYMM PARTIAL Symmetric-key function that returns partial or incremental results.
Cryptographic Accelerator
TYPE	Type that defines the cryptographic accelerator: Type Meaning CEX2A Crypto Express2 Accelerator. CEX3A Crypto Express3 Accelerator. CEX4A Crypto Express4S Accelerator. CEX5A Crypto Express5S Accelerator. CEX6A Crypto Express6S Accelerator. CEX7A Crypto Express7S Accelerator.
ID	Index that specifies the cryptographic accelerator.
CPC /LPAR	Rate, average execution time (in milliseconds) and utilization for all operations on this cryptographic accelerator.
CPC /LPAR FUNCTION	Rate, average execution time (in milliseconds) and utilization percentage for executed operations, categorized by cryptographic function type: Type Meaning RSA ME 1024 RSA ME 2048 RSA ME 4096 ME Format RSA operations with RSA key length 1024, 2048, 4096 RSA CRT 1024 RSA CRT 2048 RSA CRT 4096 CRT Format RSA operations with RSA key length 1024, 2048, 4096
ICSF services
ENCRYPTION	SDES RATE Rate of encipher service calls using single DES. SDES SIZE Average number of bytes per service call that have been enciphered using single DES. TDES RATE Rate of encipher service calls using double and triple DES. TDES SIZE Average number of bytes per service call that have been enciphered using double and triple DES. AES RATE Rate of encipher service calls using AES. AES SIZE Average number of bytes per service call that have been enciphered using AES.
DECRYPTION	SDES RATE Rate of decipher service calls using single DES. SDES SIZE Average number of bytes per service call that have been deciphered using single DES. TDES RATE Rate of decipher service calls using double and triple DES. TDES SIZE Average number of bytes per service call that have been deciphered using double and triple DES. AES RATE Rate of decipher service calls using AES. AES SIZE Average number of bytes per service call that have been deciphered using AES. Note: For AES, only service calls and bytes sent to a coprocessor are reported.
MAC	GENERATE RATE Rate of requests to generate MACs. GENERATE SIZE Average number of bytes per request for which MAC has been generated. VERIFY RATE Rate of requests to verify MACs. VERIFY SIZE Average number of bytes per request for which MAC has been verified.
HASH	SHA-1 RATE Rate of requests to hash using the SHA-1 hash algorithm. SHA-1 SIZE Average number of bytes to be hashed per request using the SHA-1 hash algorithm. SHA-256 RATE Rate of requests to hash using the SHA-224 or the SHA-256 hash algorithm. SHA-256 SIZE Average number of bytes to be hashed per request using the SHA-224 or the SHA-256 hash algorithm. SHA-512 RATE Rate of requests to hash using the SHA-384 or the SHA-512 hash algorithm. SHA-512 SIZE Average number of bytes to be hashed per request using the SHA-384 or the SHA-512 hash algorithm.
PIN	TRANSLATE RATE Rate of requests to translate PIN. VERIFY RATE Rate of requests to verify PIN.
AES MAC	GENERATE RATE Rate of requests to generate AES MACs. GENERATE SIZE Average number of bytes per request for which AES MACs have been generated. VERIFY RATE Rate of requests to verify AES MACs. VERIFY SIZE Average number of bytes per request for which AES MACs have been verified.
RSA DSIG	GENERATE RATE Rate of requests to generate RSA digital signatures. VERIFY RATE Rate of requests to verify RSA digital signatures.
ECC DSIG	GENERATE RATE Rate of requests to generate ECC digital signatures. VERIFY RATE Rate of requests to verify ECC digital signatures.
FORMAT PRESERVING ENCRYPTION	ENCIPHER RATE Rate of requests to encipher data using FPE. ENCIPHER SIZE Average number of bytes per request that have been enciphered using FPE. DECIPHER RATE Rate of requests to decipher data using FPE. DECIPHER SIZE Average number of bytes per request that have been deciphered using FPE. TRANSLATE RATE Rate of requests to translate data using FPE. TRANSLATE SIZE Average number of bytes per request that have been translated using FPE.
QSA DSIG	GENERATE RATE Rate of requests to generate QSA digital signatures. VERIFY RATE Rate of requests to verify QSA digital signatures.
FEISTEL-BASED ENCRYPTION	ENCIPHER RATE Rate of requests to encipher data using FFX. ENCIPHER SIZE Average number of bytes per request that have been enciphered using FFX. DECIPHER RATE Rate of requests to decipher data using FFX. DECIPHER SIZE Average number of bytes per request that have been deciphered using FFX. TRANSLATE RATE Rate of requests to translate data using FFX. TRANSLATE SIZE Average number of bytes per request that have been translated using FFX.