Skip to: Abstract | Comments | Solution | Migration | Download
APAR NUMBER: PJ30133 PRODUCT: TPF4 SHIPPED IN PUT: 20 ABSTRACT: PCI Cryptographic Accelerator (PCICA) support to improve the performance of starting SSL sessions. APAR CONTENTS: FEATURE TYPE STATUS NAME Base CHeader Changed include/c$ck2sn.h Base CHeader New include/icryp.h Base LoadExecutable Changed load/oco/cry140.exe Base LoadExecutable Changed load/oco/cry240.exe Base LoadExecutable New load/oco/cry540.exe Base LoadExecutable Changed load/oco/cryp40.exe Base Macro Changed macro/ck2sn.mac Base Macro New macro/cxcrpc.mac Base Macro Changed macro/cz1se.mac Base Macro Changed macro/dltec.mac Base DataMacro Changed macro/ibmsvc.mac Base DataMacro New macro/icryp.mac Base Macro Changed macro/idatb.mac Base Macro Changed macro/sip/gensip.mac Base Macro Changed macro/sip/sppgml.mac Base Macro Changed macro/sip/sptabs.mac Base Object New obj/oco/ccryp240.o Base Object New obj/oco/ccryp240.o Base Object New obj/oco/cryz40.o Base Copy Changed salin/ibmpal.cpy Base Copy Changed source/cp/base/caaa40.cpy Base Assembler New source/cp/base/ccrypt.asm Base Copy Changed source/cp/base/cidp40.cpy Base Copy Changed source/cp/base/clhl40.cpy Base Assembler Changed source/cp/base/cplkmp.asm Base Copy Changed source/cp/base/cpse40.cpy Base Copy New source/cp/base/cryc40.cpy Base Copy New source/cp/base/cryd40.cpy Base Copy Changed source/cp/base/ct1540.cpy Base PLI Changed source/ol/base/jra1.pli Base PLI Changed source/ol/base/jra2.pli Base PLI Changed source/ol/base/jrs3.pli Base C New source/rt/base/cry0.c Base BldScript New source/rt/base/cry0bs.bsc Base Assembler New source/rt/base/crya.asm Base Assembler New source/rt/base/cryi.asm Base Assembler New source/rt/base/cryr.asm Base Assembler New source/rt/base/crys.asm Base Assembler New source/rt/base/cryw.asm Base Assembler Changed source/rt/base/ctko.asm Base Assembler Changed source/rt/base/cvab.asm Base Assembler Changed source/rt/base/jcd4.asm Base Assembler Changed source/rt/base/jcs0.asm PREREQUISITE APARS: To be applied in order listed. Base CHeader Changed include/c$ck2sn.h PJ25760(09) PJ26161(10) PJ26683(11) PJ26890(12) PJ27268(13) PJ27333(13) PJ26334(14) PJ27617(14) PJ27784(14) PJ27932(15) PJ28034(15) PJ28064(15) PJ28118(15) PJ28195(16) PJ28213(16) PJ28996(18) PJ29024(18) PJ29638(19) PJ29978(19) PJ30133(20) PJ30156(20) Base CHeader New include/icryp.h PJ30133(20) Base LoadExecutable Changed load/oco/cry140.exe PJ27863(15) PJ28118(15) PJ28369(16) PJ30133(20) PJ30156(20) Base LoadExecutable Changed load/oco/cry240.exe PJ27863(15) PJ28118(15) PJ28369(16) PJ30133(20) PJ30156(20) Base LoadExecutable New load/oco/cry540.exe PJ30133(20) Base LoadExecutable Changed load/oco/cryp40.exe PJ27863(15) PJ28118(15) PJ28369(16) PJ30133(20) PJ30156(20) Base Macro Changed macro/ck2sn.mac PJ25760(09) PJ26161(10) PJ26683(11) PJ26890(12) PJ27268(13) PJ27333(13) PJ26334(14) PJ27617(14) PJ27784(14) PJ27932(15) PJ28034(15) PJ28064(15) PJ28118(15) PJ28195(16) PJ28213(16) PJ28996(18) PJ29638(19) PJ29978(19) PJ30133(20) PJ30156(20) Base Macro New macro/cxcrpc.mac PJ30133(20) Base Macro Changed macro/cz1se.mac PJ25323(09) PJ25589(09) PJ25760(09) PJ25781(09) PJ25780(09) PJ25855(10) PJ25981(10) PJ26188(10) PJ26575(11) PJ26683(11) PJ26713(11) PJ26600(11) PJ26686(11) PJ26707(11) PJ26427(12) PJ26774(12) PJ26580(12) PJ26967(12) PJ27023(12) PJ26890(12) PJ27079(12) PJ26891(13) PJ27387(13) PJ27083(13) PJ27268(13) PJ27333(13) PJ27393(13) PJ27422(13) PJ27469(13) PJ27595(14) PJ27617(14) PJ27686(14) PJ27784(14) PJ27379(15) PJ27905(15) PJ28097(15) PJ27785(15) PJ28118(15) PJ27966(15) PJ28340(16) PJ28383(17) PJ28441(17) PJ28461(17) PJ28433(17) PJ29117(18) PJ29378(18) PJ29729(19) PJ28789(19) PJ29785(19) PJ29328(19) PJ30092(19) PJ30133(20) PJ30355(20) PJ30156(20) PJ30282(20) Base Macro Changed macro/dltec.mac PJ25589(09) PJ25781(09) PJ25981(10) PJ26146(10) PJ26161(10) PJ26188(10) PJ26384(11) PJ26683(11) PJ26686(11) PJ26707(11) PJ26890(12) PJ27268(13) PJ27333(13) PJ27617(14) PJ27932(15) PJ28118(15) PJ28363(16) PJ28623(17) PJ30133(20) Base DataMacro Changed macro/ibmsvc.mac PJ25471(09) PJ25374(09) PJ25589(09) PJ25781(09) PJ26188(10) PJ26071(11) PJ26410(11) PJ26683(11) PJ26707(11) PJ27277(13) PJ27387(13) PJ27383(13) PJ27393(13) PJ27667(15) PJ29153(18) PJ30133(20) Base DataMacro New macro/icryp.mac PJ30133(20) Base Macro Changed macro/idatb.mac PJ25781(09) PJ25981(10) PJ26384(11) PJ26683(11) PJ26686(11) PJ26707(11) PJ27851(15) PJ30133(20) Base Macro Changed macro/sip/gensip.mac PJ25545(09) PJ25606(09) PJ25781(09) PJ25780(09) PJ25817(09) PJ25844(09) PJ25981(10) PJ26012(10) PJ26122(10) PJ26008(10) PJ26575(11) PJ26576(11) PJ26683(11) PJ26578(11) PJ26707(11) PJ27033(12) PJ27048(12) PJ27075(13) PJ27291(13) PJ27328(13) PJ27333(13) PJ27180(13) PJ27469(13) PJ27503(13) PJ27530(14) PJ27740(14) PJ27905(15) PJ27960(15) PJ27848(15) PJ28108(15) PJ28097(15) PJ27785(15) PJ28135(16) PJ28106(16) PJ28613(17) PJ28649(17) PJ28723(17) PJ28710(17) PJ28947(17) PJ28982(17) PJ29063(18) PJ28892(18) PJ29024(18) PJ29700(19) PJ29593(19) PJ30133(20) PJ30080(20) Base Macro Changed macro/sip/sppgml.mac PJ25199(09) PJ25425(09) PJ25632(09) PJ25614(09) PJ25589(09) PJ25703(09) PJ25720(09) PJ25332(09) PJ25760(09) PJ25763(09) PJ25781(09) PJ25780(09) PJ25817(09) PJ25982(10) PJ25983(10) PJ25981(10) PJ26125(10) PJ25880(10) PJ26150(10) PJ26187(10) PJ26008(10) PJ26156(10) PJ26161(10) PJ26188(10) PJ26174(10) PJ26270(10) PJ26337(10) PJ26374(10) PJ26366(11) PJ26283(11) PJ25761(11) PJ26515(11) PJ26575(11) PJ26577(11) PJ26534(11) PJ26683(11) PJ26522(11) PJ26713(11) PJ26600(11) PJ26581(11) PJ26666(11) PJ26693(11) PJ26686(11) PJ26809(11) PJ26707(11) PJ26864(12) PJ26892(12) PJ26746(12) PJ26793(12) PJ26841(12) PJ26887(12) PJ26967(12) PJ27023(12) PJ27028(12) PJ21337(12) PJ26904(12) PJ26890(12) PJ27079(12) PJ26895(12) PJ27156(12) PJ27095(12) PJ27197(13) PJ27246(13) PJ27305(13) PJ27345(13) PJ27231(13) PJ27277(13) PJ27351(13) PJ27387(13) PJ27328(13) PJ27383(13) PJ27083(13) PJ27299(13) PJ27302(13) PJ27268(13) PJ27333(13) PJ27214(13) PJ27393(13) PJ27422(13) PJ27180(13) PJ27469(13) PJ27094(14) PJ27430(14) PJ27636(14) PJ27380(14) PJ27491(14) PJ27647(14) PJ27714(14) PJ27484(14) PJ27530(14) PJ27627(14) PJ27650(14) PJ27617(14) PJ27686(14) PJ27634(14) PJ27804(14) PJ27746(14) PJ27784(14) PJ27865(14) PJ27894(14) PJ27786(15) PJ27847(15) PJ27951(15) PJ27863(15) PJ27905(15) PJ27954(15) PJ27848(15) PJ27932(15) PJ27728(15) PJ27925(15) PJ28029(15) PJ28021(15) PJ28108(15) PJ28097(15) PJ27785(15) PJ28136(15) PJ28118(15) PJ27966(15) PJ28229(16) PJ28286(16) PJ28266(16) PJ28140(16) PJ28168(16) PJ28195(16) PJ28020(16) PJ28213(16) PJ28396(16) PJ28386(16) PJ28435(16) PJ28503(16) PJ28499(17) PJ28621(17) PJ28586(17) PJ28623(17) PJ28493(17) PJ28649(17) PJ28766(17) PJ28757(17) PJ28759(17) PJ28758(17) PJ28765(17) PJ28785(17) PJ28810(17) PJ28809(17) PJ28129(17) PJ29089(17) PJ28667(18) PJ28996(18) PJ29118(18) PJ29213(18) PJ28997(18) PJ28786(18) PJ28901(18) PJ29219(18) PJ29285(18) PJ29437(18) PJ29396(18) PJ29500(18) PJ29539(18) PJ29428(18) PJ29576(19) PJ29823(19) PJ29798(19) PJ28789(19) PJ29675(19) PJ29850(19) PJ29600(19) PJ29926(19) PJ29582(19) PJ29925(19) PJ29756(19) PJ30091(19) PJ30223(19) PJ30234(20) PJ30117(20) PJ30102(20) PJ30133(20) PJ30355(20) PJ30156(20) PJ30204(20) PJ30282(20) PJ30310(20) PJ30665(20) PJ30323(20) PJ30735(20) Base Macro Changed macro/sip/sptabs.mac PJ27328(13) PJ30133(20) Base Object New obj/oco/ccryp240.o PJ30133(20) Base Object New obj/oco/ccryp240.o PJ30133(20) Base Object New obj/oco/cryz40.o PJ30133(20) Base Copy Changed salin/ibmpal.cpy PJ25442(09) PJ25425(09) PJ25632(09) PJ25444(09) PJ25589(09) PJ25703(09) PJ25720(09) PJ25684(09) PJ25332(09) PJ25760(09) PJ25781(09) PJ25780(09) PJ25953(10) PJ25982(10) PJ25983(10) PJ25981(10) PJ26125(10) PJ25880(10) PJ26150(10) PJ26187(10) PJ26161(10) PJ26188(10) PJ26174(10) PJ26350(10) PJ26365(11) PJ26366(11) PJ26283(11) PJ26384(11) PJ26516(11) PJ26468(11) PJ26575(11) PJ26577(11) PJ26534(11) PJ26685(11) PJ26683(11) PJ26713(11) PJ26600(11) PJ26581(11) PJ26693(11) PJ26686(11) PJ26707(11) PJ26782(12) PJ26781(12) PJ26864(12) PJ26892(12) PJ27023(12) PJ27028(12) PJ21337(12) PJ26904(12) PJ26890(12) PJ27079(12) PJ27095(12) PJ27073(13) PJ27197(13) PJ27246(13) PJ27305(13) PJ27231(13) PJ27277(13) PJ27387(13) PJ27383(13) PJ27083(13) PJ27268(13) PJ27333(13) PJ27214(13) PJ27393(13) PJ27422(13) PJ27469(13) PJ27430(14) PJ27636(14) PJ27491(14) PJ27647(14) PJ27484(14) PJ27530(14) PJ27627(14) PJ27650(14) PJ27617(14) PJ27686(14) PJ27634(14) PJ27804(14) PJ27784(14) PJ27786(15) PJ27847(15) PJ27951(15) PJ27863(15) PJ27905(15) PJ27848(15) PJ27932(15) PJ27728(15) PJ28119(15) PJ28097(15) PJ27785(15) PJ28118(15) PJ27966(15) PJ28169(16) PJ28266(16) PJ28140(16) PJ28369(16) PJ28195(16) PJ28213(16) PJ28396(16) PJ28435(16) PJ28499(17) PJ28631(17) PJ28649(17) PJ28757(17) PJ28759(17) PJ28758(17) PJ28810(17) PJ28809(17) PJ28129(17) PJ28667(18) PJ28996(18) PJ29213(18) PJ28997(18) PJ28901(18) PJ29219(18) PJ29285(18) PJ29396(18) PJ29576(19) PJ29823(19) PJ28789(19) PJ29675(19) PJ29850(19) PJ29600(19) PJ29817(19) PJ29582(19) PJ29925(19) PJ29756(19) PJ30091(19) PJ30234(20) PJ30232(20) PJ30117(20) PJ30102(20) PJ30133(20) PJ30156(20) PJ30204(20) PJ30310(20) PJ30665(20) PJ30323(20) PJ30735(20) Base Copy Changed source/cp/base/caaa40.cpy PJ25374(09) PJ25781(09) PJ25981(10) PJ26707(11) PJ27387(13) PJ27383(13) PJ27686(14) PJ30133(20) Base Assembler New source/cp/base/ccrypt.asm PJ30133(20) Base Copy Changed source/cp/base/cidp40.cpy PJ25781(09) PJ25981(10) PJ26384(11) PJ26686(11) PJ26707(11) PJ26427(12) PJ27411(14) PJ27638(14) PJ27851(15) PJ29117(18) PJ29618(19) PJ30133(20) PJ29392(20) PJ30703(20) Base Copy Changed source/cp/base/clhl40.cpy PJ25723(09) PJ25781(09) PJ25785(10) PJ25954(10) PJ25981(10) PJ26683(11) PJ26880(12) PJ27023(12) PJ27333(13) PJ27530(14) PJ28064(15) PJ28649(17) PJ28448(17) PJ28870(17) PJ29425(18) PJ29650(19) PJ29695(19) PJ29573(19) PJ29925(19) PJ30133(20) PJ30352(20) Base Assembler Changed source/cp/base/cplkmp.asm PJ25781(09) PJ25981(10) PJ26683(11) PJ26707(11) PJ27333(13) PJ30133(20) Base Copy Changed source/cp/base/cpse40.cpy PJ25361(09) PJ25632(09) PJ25523(09) PJ25589(09) PJ25613(09) PJ25459(09) PJ25781(09) PJ25940(10) PJ25981(10) PJ26146(10) PJ26320(11) PJ26339(11) PJ26284(11) PJ26412(11) PJ26683(11) PJ26600(11) PJ26707(11) PJ26719(12) PJ26900(12) PJ27186(13) PJ27383(13) PJ27784(14) PJ28089(15) PJ28615(17) PJ28623(17) PJ28649(17) PJ28774(17) PJ29293(18) PJ29403(18) PJ28154(19) PJ29826(19) PJ30013(19) PJ29975(19) PJ30124(19) PJ30151(19) PJ30133(20) PJ30539(20) Base Copy New source/cp/base/cryc40.cpy PJ30133(20) Base Copy New source/cp/base/cryd40.cpy PJ30133(20) Base Copy Changed source/cp/base/ct1540.cpy PJ26683(11) PJ26890(12) PJ27268(13) PJ27333(13) PJ27617(14) PJ27784(14) PJ27932(15) PJ28064(15) PJ28195(16) PJ28422(17) PJ30133(20) Base PLI Changed source/ol/base/jra1.pli PJ25493(09) PJ25706(09) PJ26536(11) PJ26707(11) PJ26687(11) PJ27083(13) PJ28097(15) PJ28195(16) PJ28435(16) PJ28549(17) PJ28870(17) PJ28154(19) PJ29607(19) PJ29776(19) PJ29961(19) PJ30202(19) PJ30133(20) Base PLI Changed source/ol/base/jra2.pli PJ25314(09) PJ25406(09) PJ25507(09) PJ25706(09) PJ25780(09) PJ26188(10) PJ26357(11) PJ25840(11) PJ26575(11) PJ26713(11) PJ26707(11) PJ26743(12) PJ26889(12) PJ27023(12) PJ27083(13) PJ27395(14) PJ27462(14) PJ27784(14) PJ28097(15) PJ28195(16) PJ28435(16) PJ28765(17) PJ28549(17) PJ29523(18) PJ29607(19) PJ29776(19) PJ29833(19) PJ29961(19) PJ30202(19) PJ30133(20) PJ30156(20) Base PLI Changed source/ol/base/jrs3.pli PJ25706(09) PJ26146(10) PJ26188(10) PJ26357(11) PJ26575(11) PJ26713(11) PJ26707(11) PJ26687(11) PJ26779(12) PJ26889(12) PJ27358(13) PJ27083(13) PJ27784(14) PJ28097(15) PJ28195(16) PJ28435(16) PJ28765(17) PJ28870(17) PJ29507(18) PJ29607(19) PJ29961(19) PJ30133(20) PJ30156(20) Base C New source/rt/base/cry0.c PJ30133(20) Base BldScript New source/rt/base/cry0bs.bsc PJ30133(20) Base Assembler New source/rt/base/crya.asm PJ30133(20) PJ30530(20) Base Assembler New source/rt/base/cryi.asm PJ30133(20) PJ30156(20) Base Assembler New source/rt/base/cryr.asm PJ30133(20) Base Assembler New source/rt/base/crys.asm PJ30133(20) Base Assembler New source/rt/base/cryw.asm PJ30133(20) Base Assembler Changed source/rt/base/ctko.asm PJ26188(10) PJ26686(11) PJ26892(12) PJ27469(13) PJ27092(14) PJ27762(14) PJ27686(14) PJ27746(14) PJ28118(15) PJ28150(16) PJ28195(16) PJ28213(16) PJ28664(17) PJ28799(17) PJ29248(18) PJ30133(20) Base Assembler Changed source/rt/base/cvab.asm PJ25632(09) PJ25589(09) PJ25781(09) PJ25780(09) PJ26125(10) PJ26161(10) PJ25973(11) PJ26534(11) PJ26683(11) PJ26707(11) PJ26904(12) PJ26890(12) PJ27095(12) PJ27083(13) PJ27333(13) PJ27469(13) PJ27617(14) PJ27865(14) PJ27848(15) PJ27932(15) PJ28097(15) PJ27785(15) PJ28118(15) PJ28195(16) PJ28213(16) PJ28649(17) PJ28759(17) PJ29675(19) PJ30133(20) PJ30156(20) PJ30323(20) PJ30695(20) Base Assembler Changed source/rt/base/jcd4.asm PJ26575(11) PJ26707(11) PJ26687(11) PJ27686(14) PJ28097(15) PJ28195(16) PJ28435(16) PJ28782(17) PJ28870(17) PJ28154(19) PJ30133(20) Base Assembler Changed source/rt/base/jcs0.asm PJ26188(10) PJ26357(11) PJ26575(11) PJ26713(11) PJ26707(11) PJ27083(13) PJ27784(14) PJ28097(15) PJ28195(16) PJ28782(17) PJ28765(17) PJ30133(20) PJ30156(20) PJ30753(20) COMMENTS: When a Secure Sockets Layer (SSL) session is started, a secret key is exchanged between the client and server using RSA (Rivest-Shamir-Adelman) public key cryptography. Before APAR PJ30133, TPF did these RSA operations in software, which is extremely expensive (millions of instructions). This can cause SSL session startup to greatly increase CPU utilization and limit the number of SSL sessions that could be started to the tens per second range. SOLUTION: APAR PJ30133 delivers support for TPF to use the IBM PCI cryptographic accelerator (PCICA) hardware card to offload the processing of RSA public and private operations when an SSL session is being started. PCICA cards were introduced on the IBM z900 server. Depending on RSA key length (1024-bit or 2048-bit) and the method used to perform the RSA operation (modular exponentiation or Chinese Remainder Theorem), each PCICA card enables several hundred to over 1000 SSL sessions to be started per second with a TPF system. The TPF system automatically detects how many PCICA cards, if any, are defined to the TPF logical partition (LPAR). If any PCICA cards are available, TPF will use these for RSA operations during the SSL handshake process when an SSL session is being started. If there are no PCICA cards available, TPF will do the RSA operations in software (as was done before APAR PJ30133). If TPF is running native and multiple PCICA cards are available, TPF will load balance the RSA operations across all of the available cards. Note that when TPF is running as a VM guest and multiple PCICA cards are defined to the VM LPAR, the TPF guest will see only one (virtual) PCICA card. For this, VM will load balance the RSA operations across the physical PCICA cards. New TPF commands have been created to help determine the RSA operation load on all of the cryptographic cards (also known as adjunct processors) defined to the system. Use the ZCRYP DISPLAY ALL, ZCRYP DISPLAY STATS, and ZCRYP DISPLAY RATE commands to display statistical information for the active PCICA cards. Data Collection/Reduction has also been updated to count and display statistical information for PCI cryptographic accelerator support. DEPENDENCIES SEGMENTS TO BE ASSEMBLED OR COMPILED: CCNUCL CCCPSE CCCLHR CCCTIN CCMCDC SEGMENTS TO BE LINK EDITED: cps040.exe cry040.exe (Shipped in Tar File) dataread.exe ppcp.exe COREQS: None. MIGRATION CONSIDERATIONS: None. UPDATED INFORMATION UNITS: TPF Messages (Online) TPF Messages (System Error, Offline, and Program Status Word) TPF Operations TPF Program Development Support Reference TPF System Performance and Measurement Reference TPF TCP/IP See your IBM representative if you need additional information. DOWNLOAD INSTRUCTIONS: http://www.ibm.com/software/htp/tpf/pages/maint.htm -- END APAR PJ30133
Download file(s): Login once to access server, leave window open, then click on link(s) below.Source Listing Binary