OpenPGP Key Exchange and Migration

Overview

Business exchange processes must define the mechanism for establishing trust among partners. Using cryptography as the foundation for trust, the OpenPGP support on z/OS and its use of the Java Cryptography Extension (JCE) within IBM's Java 5 SDK for z/OS, allow for three options: Passphrase exchange, OpenPGP certificate exchange, and X.509 certificate exchange. This paper describes the steps for exchanging OpenPGP certificates, X.509 certificates, and public/private key pairs, using the OpenPGP support and IBM Java 5 SDK tools: keytool and hwkeytool.