Nondisruptive process to enable - X a X a X a Requires IOCDS definition - - - - Uses CHPID numbers - - - - Uses PCHIDs (one PCHID) - X X X Requires CPACF enablement (FC 3863) X b X b X b X b Requires ICSF to be active  - X X X Offers UDX - X - - Usable for data privacy: Encryption and decryption  processing X X X - Usable for data integrity: Hashing and message  authentication X X X - Usable for financial processes and key management  operations - X X - Crypto performance IBM RMF™ monitoring - X X X Requires system master keys to be loaded - X X - System (master) key storage - X X - Retained key storage - X - - Tamper-resistant hardware packaging - X X X c Designed for FIPS 140-2 Level 4 certification - X X X Supports Linux applications that perform SSL  handshakes - - - X RSA functions - X X X High-performance SHA-1, SHA-2, and SHA-3 X X X - Clear key DES or triple DES X - - - Advanced Encryption Standard (AES) for 128-bit,  192-bit, and 256-bit keys X X X - True random number generator (TRNG) X X X - Deterministic random number generator (DRNG) X X X - Pseudo random number generator (PRNG) X X X - Clear key RSA - - - X Payment Card Industry (PCI) PIN Transaction (PTS)  Hardware Security Module (HSM) PCI-HSM X Europay, MasterCard, and Visa (EMV) support - X - - Public Key Decrypt (PKD) support for Zero-Pad option  for clear RSA private keys - X - - Public Key Encrypt (PKE) support for Mod_Raised_to  Power (MRP) function - X X - Functions or attributes CPACF CEX6C CEX6P CEX6A 206  IBM 14 Model ZR1 Technical Guide