topic Re: Data Encryption for files sent from OpenVMS to Other Platforms in Operating System - OpenVMS

Data Encryption for files sent from OpenVMS to Other Platforms

Michael Trojak — Wed, 20 Dec 2006 11:09:41 GMT

Does anyone know of an encryption solution that will encrypt on OpenVMS and decrypt on other (specifically Windows) platforms? I have a situation where we need to transfer sensitive information in text files from our legacy (VMS) system to applications on Windows systems. The Encryption for OpenVMS Version 1.6 states "Inter-system encryption operations with non-OpenVMS platforms are not supported." Has any tried using this product to encrypt on the VMS side and decrypt on another platform? The documentaion states that the VMS Encryption software uses DES standards so it seems likely that they may be done.

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Karl Rohwedder — Wed, 20 Dec 2006 11:30:48 GMT

There are version of GPG and GnuPG for OpenVMS available, e.g. here:

http://www.antinode.org/dec/sw/gnupg.html

regards Kalle

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Karl Rohwedder — Wed, 20 Dec 2006 11:32:36 GMT

Btw, the HP OpenVMS homepage has some info also:
http://h71000.www7.hp.com/opensource/opensource.html#gnupg

regards Kalle

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Ian Miller. — Wed, 20 Dec 2006 11:36:02 GMT

Encryption for VMS does use standard algorithms to encrypt but as it saves the VMS file attributes etc then its not compatible.

Look at
http://www.gnupg.org/

It's available for VMS at
http://h71000.www7.hp.com/opensource/gnupg.html

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Steven Schweda — Wed, 20 Dec 2006 12:23:14 GMT

I'd start at:

http://antinode.org/dec/sw/gnupg.html

but I may be biased.

I haven't heard anything (good or bad) about
my GnuPG 1.4.5 kit, and I don't think that
anyone else has tried the (newer) 1.4.6 kit.
I assume that no one is using the stuff in
any very serious way (or perhaps it's all
perfect).

As usual, "text files" can mean many things,
not all of which are easily portable. You
might be wise to start with Stream_LF (or,
perhaps, if the target is Windows, Stream)
record format. The Info-ZIP Zip/UnZip
programs can also attempt to translate text
file line endings, so it might pay to encrypt
a Zip archive instead of the raw text files.
Some experimentation will probably be needed.

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Andy Bustamante — Wed, 20 Dec 2006 12:26:07 GMT

Depending on your business requirements, nother option is to encrypt the link. You can use SSH and port forwarding to create a secure FTP link. See http://h71000.www7.hp.com/doc/83final/BA548_90007/ch05.html for details.

Andy

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Wim Van den Wyngaert — Thu, 21 Dec 2006 02:52:18 GMT

Or use SCP or SFTP of the SSH package.
To transfer big files user smallest number of bits.

Wim

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Robert Atkinson — Thu, 21 Dec 2006 03:55:31 GMT

For a simple solution, you could use ZIP :-

ZIP

UNIX_Options

-P encrypt with specified "password"

Rob.

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Steven Schweda — Thu, 21 Dec 2006 06:19:19 GMT

> For a simple solution [...]

Simple, but it's not very good encryption.
People offer free programs which claim to
break it, for example.

Also, the documentation suggests using "-e"
(for an interactive password request) as
opposed to "-P password", to avoid
encouraging people to store passwords in
scripts. (But not documenting "-P" has not
eliminated requests for it.)

There is some possibility of the Info-ZIP
programs supporting stronger encryption in
the future, but it may be a while. Depending
on circumstances, currently available
public-key encryption programs might be
better than the currently unavailable
stronger Zip encryption.

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Robert Atkinson — Thu, 21 Dec 2006 06:42:44 GMT

As I said, a "simple" solution.

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Steven Schweda — Thu, 21 Dec 2006 06:46:46 GMT

Death is a simple solution to disease, too,
but it's nice to disclose its side-effects
when obtaining informed consent.

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Tom O'Toole — Tue, 26 Dec 2006 14:44:04 GMT

If VMS is being called 'legacy', a la 'the gartner group', and sensitive data is being moved to windows, maybe informed consent is a little too much to ask...?....

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Michael Trojak — Tue, 26 Dec 2006 16:04:41 GMT

Thank goodness there are people out there willing to help secure systems and willing to share the information (GnuPG Project).

Re: Data Encryption for files sent from OpenVMS to Other Platforms

Gunnar Schwant — Wed, 03 Jan 2007 07:26:07 GMT

Hello,

I had a similar problem as one of our communication partners is running his systems on mainframe architectures (e.g. z/OS). He complained that he cannot use GnuPG because it is not available for mainframes.

I replied that instead of GnuPG one can use any software which is compliant to the OpenPGP standard. There are vendors which provide such software for mainframes. Here are some examples:

MegaCryption: http://www.aspg.com/megacrypt.htm

PGP Command Line: http://www.pgp.com/products/commandline/mainframes/faqs.html#4a

Moreover, it might be interesting for people that MegaCryption received FIPS certification from the National Institute of Standards and Technology recently: http://www.aspg.com/releases/MC_FIPS_Certification_0606.pdf . It supports supports compliancy for a number of state and federal privacy mandates such as: HIPAA, Sarbannes/Oxley, FERPA, Gramm-Leach-Bliley & California SB1386.

Cheers,
Gunnar.