202 IBM Eserver zSeries 990 (z990) Cryptography Implementation
A.1 The APIs
The main API to exploit the zSeries hardware cryptographic coprocessors is
ICSF. ICSF dynamically routes the requests to either the CPACF, the PCICA, or
the PCIXCC, transparently to the application.
Note that the CPACF can also be invoked directly from one application using
non-privileged assembler instructions. See the zArchitecture Principle of
Operations for the instructions Compute Intermediate Message Digest (KIMD),
Compute Last Message Digest (KLMD), Cipher Message (KM), Cipher With
Chaining (KMC), and Compute Message Authentication Code (KMAC). CPACF
is also called by ICSF for the following services:
MDC Generate (CSNBMDG,CSNBMDG1)
One-Way Hash (CSNBOWH,CSNBO ...