View source for E-Business Server:How to set the Cipher that will be used for key generation and conventional encryption processes






=== How to set the Cipher that will be used for key generation and conventional encryption processes ===

'''Technical Articles ID: SDSKB16'''


'''Environment'''<br />
E-Business Server 8.x and 7.x


'''Problem'''<br />
Setting the Cipher that will be used for key generation and conventional encryption processes.


'''Solution'''<br />
To set the Cipher used for key generation and conventional encryption processes, edit the PGP.CFG file and modify the Cipher entry:'''CIPHER='''<cipher option>(where <cipher option> is valid Cipher option (see below))The following is an example excerpt from a PGP.CFG file showing the Cipher set to 3DES:

 <nowiki># ------ CIPHER ------</nowiki>
 <nowiki># This setting specifies the symmetric cipher preference stored in</nowiki>
 <nowiki># new keys or on keys when the self-signature or passphrase is</nowiki>
 <nowiki># changed.</nowiki>
 <nowiki>#</nowiki>
 <nowiki># This setting is also used during conventional encryption, however</nowiki>
 <nowiki># SDA and PGParchive creation always use CAST5.</nowiki>
 <nowiki>#</nowiki>
 <nowiki># This setting does not apply to RSAv3 (RSA-LEGACY) keys - IDEA is</nowiki>
 <nowiki># always used when encrypting to such keys.</nowiki>
 <nowiki>#</nowiki>
 <nowiki># Valid options are:</nowiki>
 <nowiki># IDEA</nowiki>
 <nowiki># 3DES</nowiki>
 <nowiki># CAST5</nowiki>
 <nowiki># AES128</nowiki>
 <nowiki># AES192</nowiki>
 <nowiki># AES256</nowiki>
 <nowiki># Twofish</nowiki>
 <nowiki>#</nowiki>
 CIPHER = 3DES

'''NOTE: '''Changing the Cipher in the pgp.cfg file will not change the Cipher on keys that have all ready been created before the modification was made. If you want a keypair using the new Cipher you will need to go through the key generation process after the change has been made to the Cipher entry.