System and method to support varying maximum cryptographic strength for common data security architecture (CDSA) applications
AssigneeInternational Business Machines Corporation
InventorsNarayanan Vasudevan, Sohail Malik
Life of this patent
Estimating the term…
Abstract
A technique for cryptographic strength selection for at least one application is provided, in accordance with a framework for providing cryptographic support of the at least one application. Data encryption is performed at a first cryptographic strength when the at least one application is privileged to perform encryption at a first cryptographic strength. Data encryption is performed at a second cryptographic strength when the at least one application is not privileged to perform encryption at the first cryptographic strength. The first cryptographic strength is stronger than the second cryptographic strength.
Claims20
A method of selecting a cryptographic strength for at least one application, in accordance with a framework for providing cryptographic support of the at least one application, comprising the steps of:
- performing data encryption at a first cryptographic strength when the at least one application is privileged to perform encryption at a first cryptographic strength;
- and
- performing data encryption at a second cryptographic strength when the at least one application is not privileged to perform encryption at the first cryptographic strength, wherein the first cryptographic strength is stronger than the second cryptographic strength.
A system for selecting a cryptographic strength for at least one application, the system comprising:
- an at least one application requiring cryptographic support;
- and
- an application framework, coupled to the at least one application by an application program interface, operative to:
- (i) perform data encryption at a first cryptographic strength when the at least one application is privileged to perform encryption at a first cryptographic strength;
- and (ii) perform data encryption at a second cryptographic strength when the at least one application is not privileged to perform encryption at the first cryptographic strength, wherein the first cryptographic strength is stronger than the second cryptographic strength.
Dependencies are inferred from the claim text.