6  Cryptographic features This chapter describes the hardware cryptographic functions that are available on IBM z14  ZR1. The CP Assist for Cryptographic Function (CPACF), together with the Peripheral  Component Interconnect Express (PCIe) cryptographic coprocessors, offer a balanced use of  processing resources and unmatched scalability for fulfilling pervasive encryption demands. The z14 ZR1 is designed for delivering a transparent and consumable approach that enables  extensive (pervasive) encryption of data in flight and at rest, with the goal of substantially  simplifying data security and reducing the costs that are associated with protecting data while  achieving compliance mandates. This chapter also introduces the principles of cryptography and describes the implementation  of cryptography in the hardware and software architecture of IBM Z. It also describes the  features that IBM z14 ZR1 offers. Finally, the chapter summarizes the cryptographic features  and required software. Naming:  The IBM z14 server generation is available as the following machine types and  models: In the remainder of this chapter,  IBM z14 (z14)  refers to both machine types. This chapter includes the following topics: GLYPH<SM590000> Machine Type 3906 (M/T 3906), Models M01, M02, M03, M04, and M05  further  identified as  IBM z14 Model M0x , or  z14 M0x , unless otherwise specified. GLYPH<SM590000> Machine Type 3907 (M/T 3907), Model ZR1  further identified as  IBM z14 Model ZR1 ,  or  z14 ZR1 , unless otherwise specified. GLYPH<SM590000> 6.1, “Cryptography enhancements on IBM z14 ZR1” on page 174 GLYPH<SM590000> 6.2, “Cryptography overview” on page 175 GLYPH<SM590000> 6.3, “Cryptography on IBM z14 ZR1” on page 179 GLYPH<SM590000> 6.4, “CP Assist for Cryptographic Functions” on page 182 GLYPH<SM590000> 6.5, “Crypto Express6S” on page 188 GLYPH<SM590000> 6.6, “TKE workstation” on page 200 GLYPH<SM590000> 6.7, “Cryptographic functions comparison” on page 205 GLYPH<SM590000> 6.8, “Cryptographic operating system support for z14 ZR1” on page 207 173 ' Copyright IBM Corp. 2018. All rights reserved.