PURPOSE: The CIPHER command encrypts (ciphers) a Data Base Library (DBL), a specific Data Set (DS) or a Data Index (DI).
The cipher key in the CIPHER command functions like a password and is optional for DS’s and DI’s. If a cipher key is not supplied, ACCENT R will use an internal algorithm to cipher the DS or DI (auto-cipher). The object will not be not readable outside of the ACCENT R environment, but within ACCENT R the object still can be accessed without entering the cipher key in a PERMIT KEY command. Auto-ciphering is not valid for DBL’s, so a cipher key must be supplied in the CIPHER command.
If a DBL is specified, ciphering is performed on the entire DBL and not on individual objects within the DBL. In other words, specific Process Modules (PM), Command Modules (CM), Global Storages (GS), etc. cannot be individually encrypted.
SYNTAX
Assigning a cipher key:
CIPHER {DBL; DS; DI} ciphered_object_name KEY IS {cipher_key TERMINAL}
Changing a cipher key:
CIPHER {DBL; DS; DI} ciphered_object_name CHANGE KEY TO {cipher_key
TERMINAL} FROM {cipher_key TERMINAL}
|
ciphered_object_name |
is the name of the DBL, DS, or DI that is to be ciphered. |
|
cipher_key |
specifies the key for encryption. |
|
TERMINAL |
prompts the user twice from the screen for the cipher key--once to read the key and a second time to confirm it. The cipher key does not echo on the screen when it is entered. |
|
CHANGE |
allows the existing cipher key to be changed. The TO clause and FROM clause can be reversed. |
Example
If nobody is to view the code for the BOOKS system outside of ACCENT R then protect it as follows:
*USE DBL BOOKS<CR>*CIPHER DBL BOOKS KEY IS 'HIDE THE PROGRAM TEXT'<CR>Anyone using the DBL would have to enter the cipher key as in the following example:
*PERMIT DBL BOOKS KEY IS 'HIDE THE PROGRAM TEXT'<CR>*USE DBL BOOKS<CR>*PERMIT PASSWORD IS PAYADV<CR>*USE CM REVIEWADV<CR>Enter the DBL cipher key before declaring the DBL or ACCENT R will not know how to decipher the contents of the DBL. Without the cipher key, the following message will be displayed:
*USE DBL BOOKS<CR>DBL file BOOKS is not a DBL or is a protected DBLNOTES: Always enter the cipher key to access an encrypted object even if Data Base Administrator (DBA) authorization has been set with the PERMIT DBA command. There is no way for ACCENT R to decipher the data without the cipher key.
****************************** WARNING ******************************
* *
* If the cipher key is forgotten, access will be lost to encrypted data. *
* *
**********************************************************************