Skip to Content

Cryptographic Hardware Activity Report

The Cryptographic Hardware Activity Report shows the activity of cryptographic hardware features, including the standard Cryptographic Coprocessor Facility (CCF), and the optional adjunct features: PCI Cryptographic Coprocessor (PCICC), PCI-X Cryptographic Coprocessor (PCIXCC), and PCI Cryptographic Accelerator (PCICA).

Related topics

CRYPTO
CRYPTO (Report control statements)
Analyzer-reports

The Cryptographic Hardware Activity Report is produced by using the CRYPTO Analyzer control statement. The data for this report is obtained by using the CRYPTO Extractor control statement.

Warning

Important

The data in the ICSF SERVICES section of this report reflects the activity on the system where the SMF records were produced. The data in the rest of the sections reflects the activity from all systems in the CPC.

The following figure shows an example of the Cryptographic Hardware Activity Report:

(BMC.AMIOPS.SPE2110)

 1PRODUCED BY CMF ANALYZER (v.r.mm  RSL yymm)    CRYPTOGRAPHIC HARDWARE ACTIVITY REPORT                  RPTSEQ     3 PAGE      6
 BMC Software, Inc.                                            XYZ COMPANY                               REPORT DATE: DD MMM YY  5.11
 SHFT 08.00.00 08.00.00 DAYS=ALL                               HQ LOCATION                               SYSTEM ID: J80      Z 2.04.0
 ACTL DD MMM YY 23.59.35  DD MMM YY 05.59.35

 BASED ON REC TYPE/# RECS/# SAMPLES/REC HOURS:  70-2/9/0/4.29
0----------------------------------------------------- CRYPTOGRAPHIC ACCELERATOR ----------------------------------------------------
              ------ LPAR TOTAL ------    ------- CPC TOTAL ------               --------- LPAR ---------    ---------- CPC ---------
 TYPE    ID    RATE  EXEC TIME   UTIL%     RATE  EXEC TIME   UTIL%     FUNCTION   RATE  EXEC TIME   UTIL%     RATE  EXEC TIME   UTIL%
 ------  --   -----  ---------  ------    -----  ---------  ------    ---------  -----  ---------  ------    -----  ---------  ------
 CEX5A   03    5.11      0.097    0.05    38.22      0.079    0.30    ME 1024     4.90      0.096    0.05    19.51      0.085    0.17
                                                                      ME 2048     0.19      0.055       0    18.12      0.055    0.10
                                                                      ME 4096        0      0.159       0        0      0.159       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      ME TOTAL    5.10      0.095    0.05    37.63      0.071    0.27

                                                                      CRT 1024       0          0       0        0          0       0
                                                                      CRT 2048    0.02      0.611       0     0.59      0.602    0.04
                                                                      CRT 4096       0          0       0        0          0       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      CRT TOTAL   0.02      0.611       0     0.59      0.602    0.04

 CEX6A   04    5.11      0.093    0.05    38.21      0.076    0.29    ME 1024     4.90      0.093    0.05    19.48      0.082    0.16
                                                                      ME 2048     0.19      0.052       0    18.14      0.052    0.10
                                                                      ME 4096        0      0.154       0        0      0.154       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      ME TOTAL    5.10      0.092    0.05    37.62      0.068    0.26

                                                                      CRT 1024       0          0       0        0          0       0
                                                                      CRT 2048    0.02      0.604       0     0.59      0.599    0.04
                                                                      CRT 4096       0          0       0        0          0       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      CRT TOTAL   0.02      0.604       0     0.59      0.599    0.04

 CEX6A   05    5.11      0.093    0.05    38.21      0.076    0.29    ME 1024     4.90      0.093    0.05    19.50      0.082    0.16
                                                                      ME 2048     0.19      0.052       0    18.12      0.052    0.09
                                                                      ME 4096        0      0.155       0        0      0.155       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      ME TOTAL    5.10      0.091    0.05    37.62      0.067    0.25

                                                                      CRT 1024       0          0       0        0          0       0
                                                                      CRT 2048    0.02      0.606       0     0.59      0.598    0.04
                                                                      CRT 4096       0          0       0        0          0       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      CRT TOTAL   0.02      0.606       0     0.59      0.598    0.04

 -------      -----  ---------  ------    -----  ---------  ------    ---------  -----  ---------  ------    -----  ---------  ------
 SUMMARY      15.34      0.094    0.14    114.6      0.077    0.88    ME 1024    14.71      0.094    0.14    58.49      0.083    0.49
                                                                      ME 2048     0.57      0.053       0    54.37      0.053    0.29
                                                                      ME 4096     0.01      0.156       0     0.01      0.156       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      ME TOTALS  15.29      0.092    0.14    112.9      0.069    0.78

                                                                      ME 1024        0          0       0        0          0       0
                                                                      ME 2048     0.05      0.607       0     1.76      0.600    0.11
                                                                      ME 4096        0          0       0        0          0       0
                                                                                 -----  ---------  ------    -----  ---------  ------
                                                                      CRT TOTALS  0.05      0.607       0     1.76      0.600    0.11


0--------------------------------------------------- CRYPTOGRAPHIC CCA COPROCESSOR --------------------------------------------------
             ------ LPAR TOTAL ------  ------- CPC TOTAL ------   ----- LPAR ----- ------ CPC -----
  TYPE   ID   RATE  EXEC TIME   UTIL%   RATE  EXEC TIME   UTIL%   RSA KEY GEN RATE RSA KEY GEN RATE
 ------  --  -----  ---------  ------  -----  ---------  ------   ---------------- ----------------
 CEX5C   01  12.61      0.174    0.22  27.70      0.276    0.76          0                0
 CEX5C   02  12.60      0.171    0.22  27.69      0.272    0.75          0                0
 CEX6C   06  12.62      0.114    0.14  27.73      0.169    0.47          0                0
 CEX6C   07  12.62      0.114    0.14  27.75      0.170    0.47          0                0
 CEX6C   08  12.62      0.116    0.15  27.73      0.172    0.48          0                0
 CEX6C   09  12.63      0.113    0.14  27.77      0.166    0.46          0                0
 -------     -----  ---------  ------  -----  ---------  ------   ---------------- ----------------
 SUMMARY     75.70      0.134       0  166.4      0.204    0.28          0                0

0----------------------------------------------------- CRYPTOGRAPHIC PKCS11 COPROCESSOR ---------------------------------------------
             --------------------- TOTALS -------------------    ------------------------ OPERATIONS DETAILS ------------------------
             --------- LPAR --------  --------- CPC ---------                        --------- LPAR --------  --------- CPC ---------
  Type   ID   Rate  Exec Time  Util%   Rate  Exec Time  Util%    Function             Rate  Exec Time  Util%   Rate  Exec Time  Util%
 ------  --  -----  ---------  -----  -----  ---------  -----    ------------------  -----  ---------  -----  -----  ---------  -----
 CEX5P   00      0      0.792      0   0.02      0.947      0    Asymmetric Fast         0          0      0      0          0      0
                                                                 Asymmetric Key          0          0      0      0          0      0
                                                                 Asymmetric Slow         0          0      0      0          0      0
                                                                 Symmetric Complete   0.02      0.874      0   0.02      0.874      0
                                                                 Symmetric Partial       0          0      0      0      9.306      0

 CEX6P   0A      0      0.553      0   0.02      0.601      0    Asymmetric Fast         0          0      0      0          0      0
                                                                 Asymmetric Key          0          0      0      0          0      0
                                                                 Asymmetric Slow         0          0      0      0          0      0
                                                                 Symmetric Complete   0.02      0.601      0   0.02      0.601      0
                                                                 Symmetric Partial       0          0      0      0          0      0

 CEX6P   0B      0      0.550      0   0.02      0.602      0    Asymmetric Fast         0          0      0      0          0      0
                                                                 Asymmetric Key          0          0      0      0          0      0
                                                                 Asymmetric Slow         0          0      0      0          0      0
                                                                 Symmetric Complete   0.02      0.602      0   0.02      0.602      0
                                                                 Symmetric Partial       0          0      0      0          0      0

1PRODUCED BY CMF ANALYZER (v.r.mm  RSL yymm)     CRYPTOGRAPHIC HARDWARE ACTIVITY REPORT                  RPTSEQ     3 PAGE      7
 BMC Software, Inc.                                            XYZ COMPANY                               REPORT DATE: DD MMM YY  5.11
 SHFT 08.00.00 08.00.00 DAYS=ALL                               HQ LOCATION                               SYSTEM ID: J80      Z 2.04.0
 ACTL DD MMM YY 23.59.35  DD MMM YY 05.59.35

 BASED ON REC TYPE/# RECS/# SAMPLES/REC HOURS:  70-2/9/0/4.29
0----------------------------------------------------- CRYPTOGRAPHIC PKCS11 COPROCESSOR ---------------------------------------------
             --------------------- TOTALS -------------------    ------------------------ OPERATIONS DETAILS ------------------------
             --------- LPAR --------  --------- CPC ---------                        --------- LPAR --------  --------- CPC ---------
  Type   ID   Rate  Exec Time  Util%   Rate  Exec Time  Util%    Function             Rate  Exec Time  Util%   Rate  Exec Time  Util%
 ------  --  -----  ---------  -----  -----  ---------  -----    ------------------  -----  ---------  -----  -----  ---------  -----
0-------     -----  ---------  -----  -----  ---------  -----    ------------------  -----  ---------  -----  -----  ---------  -----
 SUMMARY         0          0      0   0.02      0.717      0    Asymmetric Fast         0          0      0      0          0      0
                                                                 Asymmetric Key          0          0      0      0          0      0
                                                                 Asymmetric Slow         0          0      0      0          0      0
                                                                 Symmetric Complete      0      0.692      0   0.02      0.692      0
                                                                 Symmetric Partial       0          0      0      0      9.306      0



0------------------------------------------------------------ ICSF SERVICES ---------------------------------------------------------
                  DES ENCRYPTION   DES DECRYPTION   ---- AES -----   ----- MAC ------   -------- HASH ---------   ------ PIN ------  
         TOTAL    SINGLE  TRIPLE   SINGLE  TRIPLE   ENCIPH  DECIPH   GENERATE  VERIFY   SHA-1  SHA-256  SHA-512   TRANSLATE  VERIFY  
        -------   ------  ------   ------  ------   ------  ------   --------  ------   -----  -------  -------   ---------  ------  
 RATE   3,592.7   142.97  154.17   129.16  156.14   119.70  150.51     153.43  163.95   149.0   166.38   131.22      149.10  171.46  
 SIZE       ---    17.45   13.70    17.55   17.78    15.49   15.96      15.10   16.42   15.82    16.99    16.72         ---     ---  
                                                                                                                                   
                  --- RSA DSIG ---   --- ECC DSIG ---   --- AES MAC ----   FORMAT-PRESERVING ENCRYPTION-   --- QSA DSIG ---          
                  GENERATE  VERIFY   GENERATE  VERIFY   GENERATE  VERIFY   ENCIPHER  DECIPHER  TRANSLATE   GENERATE  VERIFY          
                  --------  ------   --------  ------   --------  ------   --------  --------  ---------   --------  ------          
 RATE               157.97  134.46     160.17  152.39     147.42  143.23     138.58    141.35     152.31     163.14  164.48          
 SIZE                  ---     ---        ---     ---      17.18   17.86      18.36     17.38      14.88        ---     ---          
                                                                                                                                   
                  - FEISTEL-BASED ENCRYPTION --                                                                                      
                  ENCIPHER  DECIPHER  TRANSLATE                                                                                      
                  --------  --------  ---------                                                                                      
 RATE               142.94    118.24     166.35                                                                                      
 SIZE                17.16     14.08      13.68                                                                                      


Cryptographic Hardware Activity Report field descriptions

The following table describes each field in the Cryptographic Hardware Activity Report.

Field

Description

CRYPTOGRAPHIC ACCELERATOR

Warning

Important

This section will appear only when PCI Cryptographic Accelerator hardware is installed.

TYPE

Type of cryptographic accelerator:

  • PCICA – PCI Cryptographic Accelerator
  • CEX2A – Cryptographic Express2 Accelerator
  • CEX3A – Cryptographic Express3 Accelerator
  • CEX4A – Cryptographic Express4 Accelerator
  • CEX5A – Cryptographic Express5S Accelerator
  • CEX6A – Cryptographic Express6 Accelerator

ID

Cryptographic processor index

LPAR/CPC TOTAL

  • RATE—rate of all RSA operations per second
  • EXEC TIME—execution time, in milliseconds, of all RSA operations
  • UTIL%—ratio of execution time of all RSA operations and elapsed time

FUNCTION

Format (ME or CRT) and size of the encryption key

LPAR

  • RATE—for each encryption-key size, the rate for all RSA operations in ME or CRT format as defined
  • EXEC TIME—for each encryption-key size, the execution time for all RSA operations in ME or CRT format as defined
  • UTIL%—for each encryption-key size, the utilization for all RSA operations in ME or CRT format as defined

CPC

  • RATE—for each encryption-key size, the rate for all RSA operations in ME or CRT format as defined
  • EXEC TIME—for each encryption-key size, the execution time for all RSA operations in ME or CRT format as defined
  • UTIL%—for each encryption-key size, the utilization for all RSA operations in ME or CRT format as defined

CRYPTOGRAPHIC CCA COPROCESSOR

Warning

Important

This section will appear only when PCI Cryptographic Coprocessor hardware is installed.

TYPE

Type of cryptographic coprocessor:

  • PCICC—PCI Cryptographic Coprocessor on pre-z990 processor
  • PCIXCC—PCIX Cryptographic Coprocessor introduced on the IBM z990 processor
  • CEX2C—Crypto Express2 Coprocessor, combining PCICA and PCIXCC functions into a single feature on z890 and z990 processors
  • CEX3C – Cryptographic Express3 Coprocessor
  • CEX4C – Common Cryptographic Architecture (CCA) Coprocessor, introduced on the IBM zEnterprise EC12 (zEC12) server
  • CEX5C – Cryptographic Express5S Coprocessor
  • CEX6C – Cryptographic Express6 Coprocessor

ID

Cryptographic processor index

LPAR/CPC TOTAL

  • RATE—rate of all operations per second
  • EXEC TIME—average execution time, in milliseconds, of all operations
  • UTIL%—ratio of execution time for all operations to elapsed time

RSA KEY GEN RATE

Rate for RSA-key-generation operations per second

CRYPTOGRAPHIC PKCS11 COPROCESSOR

Warning

Important

This section will appear only when Cryptographic PKCS11 Coprocessor hardware is installed.

TYPE

Type of cryptographic coprocessor:

  • CEX4P – Public-Key Cryptography Standards (PKCS) #11 Coprocessor, introduced on the IBM zEC12 server
  • CEX5P – Express5S PKCS #11 Coprocessor
  • CEX6P – Cryptographic Express6 XCP

ID

Cryptographic processor index

LPAR/CPC TOTAL

  • Rate—rate of all operations per second
  • Exec Time—average execution time, in milliseconds, of all operations
  • Util%—ratio of execution time for all operations to elapsed time

OPERATIONS DETAILS

  • Function—the type of cryptographic function
    • Asymmetric Fast – Fast asymmetric-key function
    • Asymmetric Key – Asymmetric-key generation function
    • Asymmetric Slow – Slow asymmetric-key function
    • Symmetric Complete – Symmetric-key function that returns a complete or final result
    • Symmetric Partial – Symmetric-key function that returns partial or incremental results
  • Rate—for each type of cryptographic function, the rate of all operations per second
  • Exec Time—for each type of cryptographic function, the average execution time, in milliseconds, of all operations
  • Util%—for each type of cryptographic function, the ratio of execution time for all operations to elapsed time

ICSF SERVICES

TOTAL

RATE—rate of all the calls per second

DES ENCRYPTION

  • SINGLE RATE—single DES: number of calls to encipher per second
  • SINGLE SIZE—single DES: average number of bytes of data enciphered
  • TRIPLE RATE—triple DES: number of calls to encipher per second
  • TRIPLE SIZE—triple DES: average number of bytes of data enciphered

DES DECRYPTION

  • SINGLE RATE—single DES: number of calls to decipher per second
  • SINGLE SIZE—single DES: average number of bytes of data deciphered
  • TRIPLE RATE—triple DES: number of calls to decipher per second
  • TRIPLE SIZE—triple DES: average number of bytes of data deciphered

AES

  • ENCIPH RATE—number of calls to encipher per second
  • ENCIPH SIZE—average number of bytes of data enciphered
  • DECIPH RATE—number of calls to decipher per second
  • DECIPH SIZE—average number of bytes of data deciphered

MAC

  • GENERATE RATE—rate of calls to MAC generate per second
  • GENERATE SIZE—average number of bytes of data MAC generated
  • VERIFY RATE—rate of calls to MAC verify per second
  • VERIFY SIZE—average number of bytes of data MAC verified

HASH SHA-1

HASH SHA-256

HASH SHA-512

  • RATE—rate of hash calls per second

  • SIZE—average number of bytes of data hashed

    The measures represent three hashing algorithms: Secure Hash Algorithm-1 (SHA-1); -256 (SHA-256); and -384 and -512 (SHA-512). SHA-256 was introduced with the IBM z9-109 processor and is supported on z/OS 1.6 and later. SHA-384 and SHA-512 were introduced with the IBM z10 processor and are supported on z/OS 1.7 and later.

PIN

  • TRANSLATE RATE—rate of calls to PIN translate per second
  • VERIFY RATE—rate of calls to PIN verify per second

RSA DSIG

  • GENERATE RATE—rate of RSA Digital Signatures Generate calls per second
  • VERIFY RATE—rate of RSA Digital Signatures Verify calls per second

ECC DSIG

  • GENERATE RATE—rate of ECC Digital Signatures Generate calls per second
  • VERIFY RATE—rate of ECC Digital Signatures Verify calls per second

AES MAC

  • GENERATE RATE—rate of AES MAC Generate calls per second
  • GENERATE SIZE—average number of bytes of data generated per Generate call
  • VERIFY RATE—rate of AES MAC Verify calls per second
  • VERIFY SIZE—average number of bytes of data verified per Verify call

FORMAT-PRESERVING ENCRYPTION

  • ENCIPHER RATE—rate of Format-Preserving Encryption Encipher calls per second
  • ENCIPHER SIZE—average number of bytes of data enciphered per Encipher call
  • DECIPHER RATE—rate of Format-Preserving Encryption Decipher calls per second
  • DECIPHER SIZE—average number of bytes of data deciphered per Decipher call
  • TRANSLATE RATE—rate of Format-Preserving Encryption Translate calls per second
  • TRANSLATE SIZE—average number of bytes of data translated per Translate call
  • GENERATE RATE—rate of QSA Digital Signature generate calls per second
  • VERIFY RATE—rate of QSA Digital Signature verify calls per second

(BMC.AMIOPS.SPE2110)

FEISTEL-BASED ENCRYPTION

  • ENCIPHER RATE—rate of Feistel-based encryption encipher calls per second
  • ENCIPHER SIZE—average number of bytes enciphered per encipher call
  • DECIPHER RATE—rate of Feistel-based encryption decipher calls per second
  • DECIPHER SIZE—average number of bytes deciphered per decipher call
  • TRANSLATE RATE—rate of Feistel-based encryption translate calls per second
  • TRANSLATE SIZE—average number of bytes translated per translate call

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Ops Monitor for CMF 6.3