AES 256-bit Encryption and CPU in Top Secret

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Is there an  increase in CPU utilization upgrading to AES 256 encryption?

Environment

Release:
Component: TSSMVS

Resolution

 Informational APAR #: SI00733
Title: AES256 CPU INCREASE DURING RACROUTE VERIFY PSWD IN CICS
An increase in CPU utilization occurs for AES256 security encryption during  
RACROUTE VERIFY PASSWORD events in CICS.                                     
                                                                             
SYMPTOMS:                                                                    
CICS encounters slower VERIFY PASSWORD throughput and increased CPU usage.   
                                                                             
IMPACT:                                                                      
Increased CPU usage occurs.                                                  
                                                                             
CIRCUMVENTION:                                                               
Apply APARs SO00168 and SO00169 if you plan to implement AES256              
encryption in CA Top Secret R16.0.                                           
                                                                             
The AES256 algorithm is more secure than DES or                              
AES128, but by design, is more computationally intensive. Carefully review   
the planning considerations before enabling AES256 security encryption.