Encrypting Data

Encrypting data using system API

Required Parameter list for Qc3EncryptData
Required Parameter Group:
1 Clear data Input Char(*)
2 Length of clear data Input Binary(4)
3 Clear data format name Input Char(8)
4 Algorithm description Input Char(*)
5 Algorithm description format name Input Char(8)
6 Key description Input Char(*)
7 Key description format name Input Char(8)
8 Cryptographic service provider Input Char(1)
9 Cryptographic device name Input Char(10)
10 Encrypted data Output Char(*)
11 Length of area provided for encrypted data Input Binary(4)
12 Length of encrypted data returned Output Binary(4)
13 Error code I/O Char(*)

 

[cc lang=”php”]
H BNDDIR(‘QC2LE’)
H DFTACTGRP(*NO)
H OPTION(*NODEBUGIO:*SRCSTMT)

*————————————————
** E N T R Y P A R M S **
*————————————————

d encrypt pr
d inmode 1a
d invalue 30a
d inkey 30a
d outvalue 30a

d encrypt pi
d inmode 1a
d invalue 30a
d inkey 30a
d outvalue 30a

d workmode s 1a
d workinvalue s 30a
d workinkey s 30a
d workoutvalue s 30a

*————————————————
** E N C R Y P T D A T A **
*————————————————
D Qc3EncryptData PR ExtProc(‘Qc3EncryptData’)
D szClearData 65535A OPTIONS(*VARSIZE)
D nLenClearData 10I 0 Const
D clearDataFmt 8A Const

D AlgoDescript 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const

D KeyDescriptor 512A Const OPTIONS(*VARSIZE)
D szKeyFormat 8A Const

** 0=Best choice, 1=Software, 2=Hardware
D CryptoService 1A Const
** Hardware Cryptography device name or *BLANKS
D CryptoDevName 10A Const

D szEncryptedData…
D 65535A OPTIONS(*VARSIZE)
D nEncryptedDataVarLen…
D 10I 0 Const
D nEncryptedDataRtnLen…
D 10I 0
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)

*————————————————
** D E C R Y P T D A T A **
*————————————————
D Qc3DecryptData PR ExtProc(‘Qc3DecryptData’)
D szEncData 65535A OPTIONS(*VARSIZE)
D nLenEncData 10I 0 Const

D AlgoDescript 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const

D KeyDescriptor 512A Const OPTIONS(*VARSIZE)
D szKeyFormat 8A Const

** 0=Best choice, 1=Software, 2=Hardware
D CryptoService 1A Const
** Hardware Cryptography device name or *BLANKS
D CryptoDevName 10A Const

D szClearData 65535A OPTIONS(*VARSIZE)
D nClearVarLen 10I 0 Const
D nRtnClearLen 10I 0
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
*————————————————
** Message Digest/Hash
*————————————————
D Qc3CalcHash PR ExtProc(‘Qc3CalculateHash’)
D szClearData 65535A OPTIONS(*VARSIZE)
D nLenClearData 10I 0 Const
D clearDataFmt 8A Const

D AlgoDescr 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const

** 0=Best choice, 1=Software, 2=Hardware
D CryptoService 1A Const
** Hardware Cryptography device name or *BLANKS
D CryptoDevName 10A Const

D rtnHash 64A OPTIONS(*VARSIZE)
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
*————————————————
** Cryptography API Algorithm ALGD0300 Structure
*————————————————
D ALGD0300_T DS Qualified
D BASED(DS_TEMPL)
** Stream algorithm: 30 = RC4
D Algorithm 10I 0

D Qc3CreateAlgorithmContext…
D PR ExtProc(‘Qc3CreateAlgorithmContext’)
D AlgoDescription…
D 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const
D contextToken 8A
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
** Encryption Data Structures
D KEYD0100_T DS Qualified
D BASED(DS_TEMPL)
D keyContext 8A

D KEYD0200_T DS Qualified
D BASED(DS_TEMPL)
D type 10I 0
D length 10I 0
D format 1A
D value 256A
/IF DEFINED(*V5R1M0)
D API_ErrorDS_T DS Qualified
D dsLen 10I 0 Inz
D rtnLen 10I 0 Inz
D cpfMsgID 7A
D apiResv1 1A Inz(X’00’)
D apiExcDta1 64A
/ENDIF

** New IBM API Error DS
D XT_api_ErrorEx DS Inz
D XT_apiKey 10I 0
D XT_apiDSLen 10I 0
D XT_apiRtnLenEx…
D 10I 0
D XT_apiMsgIDEx 7A
D XT_apiResvdEx 1A
D XT_apiCCSID 10I 0
D XT_apiOffExc 10I 0
D XT_apiExcLen 10I 0
D XT_apiExcData 64A

D Qc3DestroyAlgorithmContext…
D PR ExtProc(‘Qc3DestroyAlgorithmContext’)
D ContextToken 8A Const
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)

** API Error Data structure
D QUSEC_EX DS Qualified
D Based(TEMPLATE_T)
D charKey 10I 0
D nErrorDSLen 10I 0
D nRtnLen 10I 0
D msgid 7A
D Reserved 1A
D CCSID 10I 0
D OffsetExcp 10I 0
D excpLen 10I 0
D excpData 128A

D ALGO_DES C Const(20)
D ALGO_TDES C Const(21)
D ALGO_AES C Const(22)
D ALGO_RC4 C Const(30)
D ALGO_RSA_PUB C Const(50)
D ALGO_RSA_PRIV C Const(51)

D ANY_CRYPTO_SRV C Const(‘0’)
D SWF_CRYPTO_SRV C Const(‘1’)
D HWD_CRYPTO_SRV C Const(‘2’)
D CRYPTO_SRV S 10A Inz(*BLANKS)

** Cipher API data structures.
D myAlgo DS LikeDS(ALGD0300_T)
D myKey DS LikeDS(KEYD0200_T)
D apiError DS LikeDS(qusec_ex)

** The clear text (data to be encrypted)

** The length of the data returned by the APIs
D nRtnLen S 10I 0
** The encrypted data variable
D encData S 500A

/free

workinvalue = invalue;
workinkey = inkey;
workoutvalue = outvalue;

myAlgo.Algorithm = ALGO_RC4;

myKey.type = ALGO_RC4;
myKey.length = %Len(%TrimR(workinkey));
myKey.Format = ‘0’;
myKey.value = %TrimR(workinkey);
apiError = *ALLX’00’;
apiError.nErrorDSLen=%size(apiError);

select;
when inmode = ‘E’;

Qc3EncryptData(workinvalue:%len(%TrimR(workinvalue)):’DATA0100′:
myAlgo : ‘ALGD0300’ :
myKey : ‘KEYD0200′ :
ANY_CRYPTO_SRV : CRYPTO_SRV :
encData : %size(encData) : nRtnLen :
apiError );
outvalue = encData;
apiError = *ALLX’00’;
apiError.nErrorDSLen=%size(apiError);

when inmode = ‘D’;
Qc3DecryptData(workinvalue : %len(%TrimR(workinvalue)) :
myAlgo : ‘ALGD0300’ :
myKey : ‘KEYD0200’ :
ANY_CRYPTO_SRV : CRYPTO_SRV :
outvalue : %size(outvalue) : nRtnLen :
apiError );

endsl;

*inlr = *on;
/end-free
[/cc]

 

Another Encrypt procedure with example

Objects:

• ENCRYPT – Main processing program
• ENCRYPT_CP – PR section of code used as copy book in calling program
• ENCRYPT_TD – Example of how to use

ENCRYPT

[cc lang=”php”]

H NOMAIN EXPROPTS(*RESDECPOS)
H BNDDIR(‘QC2LE’)
* Beginning of procedure
/COPY QPRCSRC,ENCRYPT_CP
P encrypt B EXPORT
*————————————————
** E N T R Y P A R M S **
*————————————————
d encrypt pi 512A
d inmode 1a VALUE
d invalue 512a VALUE
d inkey s 30a Inz(*all’MyPickle12345′)
d outvalue s 512a
d workmode s 1a
d workinvalue s 512a
d workinkey s 30a
d workoutvalue s 512a
*————————————————
** E N C R Y P T D A T A **
*————————————————
D Qc3EncryptData PR ExtProc(‘Qc3EncryptData’)
D szClearData 65535A OPTIONS(*VARSIZE)
D nLenClearData 10I 0 Const
D clearDataFmt 8A Const
D AlgoDescript 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const
D KeyDescriptor 512A Const OPTIONS(*VARSIZE)
D szKeyFormat 8A Const
** 0=Best choice, 1=Software, 2=Hardware
D CryptoService 1A Const
** Hardware Cryptography device name or *BLANKS
D CryptoDevName 10A Const
D szEncryptedData…
D 65535A OPTIONS(*VARSIZE)
D nEncryptedDataVarLen…
D 10I 0 Const
D nEncryptedDataRtnLen…
D 10I 0
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
*————————————————
** D E C R Y P T D A T A **
*————————————————
D Qc3DecryptData PR ExtProc(‘Qc3DecryptData’)
D szEncData 65535A OPTIONS(*VARSIZE)
D nLenEncData 10I 0 Const
D AlgoDescript 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const
D KeyDescriptor 512A Const OPTIONS(*VARSIZE)
D szKeyFormat 8A Const
** 0=Best choice, 1=Software, 2=Hardware
D CryptoService 1A Const
** Hardware Cryptography device name or *BLANKS
D CryptoDevName 10A Const
D szClearData 65535A OPTIONS(*VARSIZE)
D nClearVarLen 10I 0 Const
D nRtnClearLen 10I 0
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
*————————————————
** Message Digest/Hash
*————————————————
D Qc3CalcHash PR ExtProc(‘Qc3CalculateHash’)
D szClearData 65535A OPTIONS(*VARSIZE)
D nLenClearData 10I 0 Const
D clearDataFmt 8A Const
D AlgoDescr 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const
** 0=Best choice, 1=Software, 2=Hardware
D CryptoService 1A Const
** Hardware Cryptography device name or *BLANKS
D CryptoDevName 10A Const
D rtnHash 64A OPTIONS(*VARSIZE)
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
*————————————————
** Cryptography API Algorithm ALGD0300 Structure
*————————————————
D ALGD0300_T DS Qualified
D BASED(DS_TEMPL)
** Stream algorithm: 30 = RC4
D Algorithm 10I 0
D Qc3CreateAlgorithmContext…
D PR ExtProc(‘Qc3CreateAlgorithmContext’)
D AlgoDescription…
D 64A Const OPTIONS(*VARSIZE)
D szAlgoFormat 8A Const
D contextToken 8A
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
** Encryption Data Structures
D KEYD0100_T DS Qualified
D BASED(DS_TEMPL)
D keyContext 8A
D KEYD0200_T DS Qualified
D BASED(DS_TEMPL)
D type 10I 0
D length 10I 0
D format 1A
D value 256A
/IF DEFINED(*V5R1M0)
D API_ErrorDS_T DS Qualified
D dsLen 10I 0 Inz
D rtnLen 10I 0 Inz
D cpfMsgID 7A
D apiResv1 1A Inz(X’00’)
D apiExcDta1 64A
/ENDIF
** New IBM API Error DS
D XT_api_ErrorEx DS Inz
D XT_apiKey 10I 0
D XT_apiDSLen 10I 0
D XT_apiRtnLenEx…
D 10I 0
D XT_apiMsgIDEx 7A
D XT_apiResvdEx 1A
D XT_apiCCSID 10I 0
D XT_apiOffExc 10I 0
D XT_apiExcLen 10I 0
D XT_apiExcData 64A
D Qc3DestroyAlgorithmContext…
D PR ExtProc(‘Qc3DestroyAlgorithmContext’)
D ContextToken 8A Const
D api_ErrorDS LikeDS(API_ErrorDS_T)
D OPTIONS(*VARSIZE)
** API Error Data structure
D QUSEC_EX DS Qualified
D Based(TEMPLATE_T)
D charKey 10I 0
D nErrorDSLen 10I 0
D nRtnLen 10I 0
D msgid 7A
D Reserved 1A
D CCSID 10I 0
D OffsetExcp 10I 0
D excpLen 10I 0
D excpData 128A
D ALGO_DES C Const(20)
D ALGO_TDES C Const(21)
D ALGO_AES C Const(22)
D ALGO_RC4 C Const(30)
D ALGO_RSA_PUB C Const(50)
D ALGO_RSA_PRIV C Const(51)
D ANY_CRYPTO_SRV C Const(‘0’)
D SWF_CRYPTO_SRV C Const(‘1’)
D HWD_CRYPTO_SRV C Const(‘2’)
D CRYPTO_SRV S 10A Inz(*BLANKS)
** Cipher API data structures.
D myAlgo DS LikeDS(ALGD0300_T)
D myKey DS LikeDS(KEYD0200_T)
D apiError DS LikeDS(qusec_ex)
** The clear text (data to be encrypted)
** The length of the data returned by the APIs
D nRtnLen S 10I 0
** The encrypted data variable
D encData S 500A
/free
workinvalue = invalue;
workinkey = inkey;
workoutvalue = outvalue;
myAlgo.Algorithm = ALGO_RC4;
myKey.type = ALGO_RC4;
myKey.length = %Len(%TrimR(workinkey));
myKey.Format = ‘0’;
myKey.value = %TrimR(workinkey);
apiError = *ALLX’00’;
apiError.nErrorDSLen=%size(apiError);
select;
when inmode = ‘E’;
Qc3EncryptData(workinvalue:%len(%TrimR(workinvalue)):’DATA0100′:
myAlgo : ‘ALGD0300’ :
myKey : ‘KEYD0200′ :
ANY_CRYPTO_SRV : CRYPTO_SRV :
encData : %size(encData) : nRtnLen :
apiError );
outvalue = encData;
apiError = *ALLX’00’;
apiError.nErrorDSLen=%size(apiError);
when inmode = ‘D’;
Qc3DecryptData(workinvalue : %len(%TrimR(workinvalue)) :
myAlgo : ‘ALGD0300’ :
myKey : ‘KEYD0200’ :
ANY_CRYPTO_SRV : CRYPTO_SRV :
outvalue : %size(outvalue) : nRtnLen :
apiError );
endsl;
return outvalue;
/end-free
P Encrypt E

[/cc]

ENCRYPT_CP

[cc lang=”php”]

* ENCRYPT_CP – encrypt a string
d encrypt pr 512A
d inmode 1a VALUE
d invalue 512a VALUE

[/cc]

ENCRYPT_TS

[cc lang=”php”]

F*****************************************************************
H DFTACTGRP(*NO) OPTION(*SRCSTMT: *NODEBUGIO) BNDDIR(‘UTILITIES’)
/copy qprcsrc,ENCRYPT_CP

d outMode s 1 inz
d MyString s 512 inz
d ReturnString s 512 inz

/Free

OutMode = ‘E’; //Encrypt
MyString = ‘Jamie Was Here’;

ReturnString = Encrypt(OutMode: MyString);

// ReturnString = “?#·Ñ{åJ?/è??<Д
OutMode = ‘D’; // Decrypt
ReturnString = Encrypt(OutMode: ReturnString);
// ReturnString = “Jamie Was Here”

*inlr = *on;

[/cc]