a. To make adding the Crypto Express features nondisruptive, the logical partition must be predefined with  the appropriate PCI Express cryptographic adapter number. This number must be selected from its  candidate list in the partition image profile. b. This feature is not required for Linux if only RSA clear key operations are used. DES or triple DES  encryption requires CPACF to be enabled. c. This feature is physically present, but is not used when configured as an accelerator (clear key only). Chapter 6. Cryptographic features  251 Supports Linux applications that perform SSL  handshakes - - - X RSA functions - X X X High-performance SHA-1, SHA-2, and SHA-3 X X X - Clear key DES or triple DES X - - - Advanced Encryption Standard (AES) for 128-bit,  192-bit, and 256-bit keys X X X - True random number generator (TRNG) X X X - Deterministic random number generator (DRNG) X X X - Pseudo random number generator (PRNG) X X X - Clear key RSA - - - X Payment Card Industry (PCI) PIN Transaction (PTS)  Hardware Security Module (HSM) PCI-HSM X X Europay, MasterCard, and Visa (EMV) support - X - - Public Key Decrypt (PKD) support for Zero-Pad option  for clear RSA private keys - X - - Public Key Encrypt (PKE) support for Mod_Raised_to  Power (MRP) function - X X - Remote loading of initial keys in ATM  - X - - Improved key exchange with non-CCA systems - X - - ISO 16609 CBC mode triple DES message authenti- cation code (MAC) support  - X - - AES GMAC, AES GCM, AES XTS mode, CMAC - X - - SHA-2, SHA-3 (384,512), HMAC - X - - Visa Format Preserving Encryption - X - - AES PIN support for the German banking industry - X - - ECDSA (192, 224, 256, 384, 521 Prime/NIST) - X - - ECDSA (160, 192, 224, 256, 320, 384, 512 BrainPool) - X - - ECDH (192, 224, 256, 384, 521 Prime/NIST) - X - - ECDH (160, 192, 224, 256, 320, 384, 512 BrainPool) - X - - PNG (Prime Number Generator) - X - - Functions or attributes CPACF CEX7C CEX7P CEX7A