In <[log in to unmask]> [log in to unmask] writes:
> I have been given a requirement to help facilitate the regular transfer of
> employee related data, from an outside firm into our Human Resources
> application. Since our HP3000 is behind a 'fire wall' I'll have to let the
> outside firm 'put' the data on our 'fire wall gate machine' and get it from
> there. Since the data could stay on the gateway machine for some hours I'd
> want them to be encrypted, from their source, and then decrypted after they
> are moved to the HP and prior to them being loaded into our application.
>
> Does anyone know of any encryption/decryption software that could be used
> in the above setup? The source machine, most likely, will *not* be an HP.
Not entirely useful to you perhaps, but as we have also been looking into
encryption solutions on the 3000 lately, thought I'd point out what I've
found and hope someone out there might chime in with other info.
There are two main camps in the (very) secure encryption game nowadays;
pgp and RSA's technology.
pgp was freeware, and though the legality of exporting it was the source of
many long winded debates, all commercial rights to pgp now belong to a
company called "ViaCrypt". It's still free for "personal" "non-commercial"
use, but anything else (including educational institutions) are required to
buy their licensed versions; at somewhere around $100-$150 per user.
pgp was ported to the 3000, though the ViaCrypt folks apparently don't know
about it (they don't support the 3000, but offered to if anyone wanted to
do the port for them, or would loan them the hardware to do it themselves).
Steve Elmer (formerly of HP) ported it while he was at HP, and we also got
it running on our system, though we didn't test it much (nor did Steve I
think). Faced with the license costs, I'm not anxious to throw time into
officially porting/testing it as I'm not sure it's worthwhile at this
point.
RSA's various toolkits (including TIPEM used for encrypting e-mail) seemed
more reasonably priced ($290 for a developers license last I checked - don't
recall about royalty fees though); and of course with RSA you're faced with
the licensing issues if you have any customers (or sites?) outside the US.
RSA also doesn't know what an HP 3000 is, but expressed similar interest in
porting their toolkits to MPE/iX if it wasn't going to be horrendously
involved. (Developers license DIDN'T entitle you to source code if I recall
correctly, just object code - source was something like $50,000). I
understand that the pgp code included some RSA code, and that in porting
pgp, the RSA stuff (at least the parts it used) ported also - for what
that's worth...
My point in all this(sorry for rambling) is that we'd very much like to see
an industrial-strength encryption solution for the 3000, and I don't think
it would even be a difficult port, but perhaps the folks at RSA need to hear
from some more (potential) customers to get the wheels moving...
______________________/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_
Chris Bartram Sales (US): 800 Net-Mail Fax:+1 703 451-3720
______ -or- +1 703 569-9189 E-Mail: [log in to unmask]
/__ | \__________ Sales (Europe):+44(0480)414131 Fax:+44(0480)414134
/ / | / ________ Sales (Pacific Rim):+61 3 489 8216 (same for fax)
| /_ |< ______ Tech Support:+1 703 569-9189 Fax:+1 703 451-3720
\ __)| \ ___ E-mail: [log in to unmask] Personal(me): [log in to unmask]
\______/ Associates 6901 Old Keene Mill Rd Suite 205 Springfield VA 22150
______________________/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_/\_
Gopher: gopher.3k.com Anon-FTP: ftp.3k.com WWW: http://www.3k.com/
|
