Skip to Main Content
IBM Z Software


This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Categories z/TPF
Created by Guest
Created on Jul 18, 2017

Need RSA3072 cypher or higher supported

Infoconnect, our intellegent terminal endpoint, requires SHA3072 or higher.
Micro Focus uses the Implementation Guidance for FIPS 140-2 http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402IG.pdf . If you look at Table 2 (Recommended algorithms and minimum key sizes) starting on page 99, you will see that there are date ranges for when certain minimum bits of strength are required depending on the life of the data to remain secure.
Micro Focus has taken the approach to require this 3072 key length, so that the information remains secure beyond the year 2030.

Idea priority Urgent
  • Guest
    Reply
    |
    Nov 7, 2017

    z/TPF supports public key cryptography keys (RSA-2048) that the industry says will still be valid for more than a decade (until the year 2030). The industry direction is to shift to a newer public key cryptography algorithm, ECC; therefore, we expect that well before 2030 platforms, including, z/TPF will support newer public key algorithms. For these reasons, z/TPF does not plan on adding support for larger RSA keys.

  • Guest
    Reply
    |
    Sep 1, 2017

    If z/TPF cannot generate the key size we need then we need some way to securely generate and share keys within our enterprise that includes z/TPF. The z/TPF product should have an interface that allows us to do this. Should this be a requirement on it's own?

  • Guest
    Reply
    |
    Aug 11, 2017

    RSA usage by SSL is to create a session key that is only used for the life of that one session. z/TPF currently supports up to 2048-bit RSA keys which are expected to be usable for another 13 years (until the year 2030). The question becomes once we get closer to 2030, what will be the preferred and most widely used public key crypto algorithm for SSL - will it be RSA with longer keys, or will it be a different standard such as ECC. It is premature at this point to know what the needed ciphers will be more than a decade in the future.

  • Guest
    Reply
    |
    Aug 9, 2017

    This is needed for SSL.