NAME¶

OPENSSL_s390xcap - the z processor capabilities vector

SYNOPSIS¶

 env OPENSSL_s390xcap=... <application>

DESCRIPTION¶

libcrypto supports z architecture instruction set extensions. These extensions are denoted by individual bits in the capability vector. When libcrypto is initialized, the bits returned by the STFLE instruction and by the QUERY functions are stored in the vector.

The OPENSSL_s390xcap environment variable can be set before starting an application to affect capability detection. It is specified by a colon-separated list of 64-bit values in hexadecimal notation, the 0x prefix being optional. The ~ prefix means bitwise NOT and a point indicates the end of the STFLE bits respectively the beginning of the QUERY bits.

After initialization, the capability vector is ANDed bitwise with the corresponding parts of the environment variable.

The following bits are significant:

: :

#62 vector facility

.

#60 KIMD-SHA-512

#61 KIMD-SHA-256

#62 KIMD-SHA-1

:

#62 KIMD-GHASH

:

#11 KM-XTS-AES-256

#13 KM-XTS-AES-128

#43 KM-AES-256

#44 KM-AES-192

#45 KM-AES-128

: :

#43 KMC-AES-256

#44 KMC-AES-192

#45 KMC-AES-128

: :

#43 KMAC-AES-256

#44 KMAC-AES-192

#45 KMAC-AES-128

: : : :

#43 KMO-AES-256

#44 KMO-AES-192

#45 KMO-AES-128

: :

#43 KMF-AES-256

#44 KMF-AES-192

#45 KMF-AES-128

: :

#60 PRNO-SHA-512-DRNG

:

#13 PRNO-TRNG

:

#43 KMA-GCM-AES-256

#44 KMA-GCM-AES-192

#45 KMA-GCM-AES-128

EXAMPLES¶

OPENSSL_s390xcap=0:0:~0x4000000000000000 disables the vector facility.

OPENSSL_s390xcap=.0:0 disables KIMD.

OPENSSL_s390xcap=.::~0x2800 disables KM-XTS-AES.

COPYRIGHT¶

Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.