IBM #EJ27 / #EJ28 PCIe Cryptographic Coprocessor, CCIN 4765, for IBM Power Systems

IBM feature #EJ27 and feature #EJ28 are the PCIe Cryptographic Coprocessor, CCIN 4765. They are the same adapter under two feature codes: #EJ27 is supplied without a blind-swap cassette, and #EJ28 with a generation-3 blind-swap cassette. The card provides the secure-key cryptographic accelerator and the cryptographic coprocessor functions in a single PCIe card for IBM Power Systems servers. The coprocessor functions cover banking and finance applications, including financial personal identification number (PIN) processing and Europay, Mastercard, Visa (EMV) credit card functions.

The secure-key accelerator functions speed up Secure Sockets Layer (SSL) transactions, and the card supports digital signature applications. Host applications reach its services through the Common Cryptographic Architecture (CCA) application programming interfaces and the Public-Key Cryptographic Standards (PKCS11), both on a single firmware load. Cryptographic keys are stored in a tamper-resistant hardware security module rated to FIPS PUB 140-2 security requirements.

The card is PCIe x4, standard height and half length, on PCI Express v1.1a, with integrated dual PPC processors and ASIC accelerator engines. It handles 3072 and 4096 bit RSA CRT in hardware, SHA 256 in hardware or firmware within the secure module, and secure-key AES with 128, 192 and 256 bit keys, with fast-path symmetric and asymmetric operations for secure and clear keys. The FRU number is 45D7948. Each card carries a certified device key in battery-powered protected memory; a tamper event or incorrect battery removal destroys the key, and the card is permanently disabled outside its tamper protection range. Operating ambient range is 10 to 35 degrees C.