MQSeries.net :: View topic

RogerLacroix · Posted: Tue Oct 30, 2007 12:01 pm Post subject: MQ Instant Secure Data

The MQ Instant Secure Data (MQISD) is a new solution that provides encryption for MQ message data. In cryptography, encryption is the process of transforming information into an unreadable form (encrypted data). Decryption is the reverse process. It makes the encrypted information readable again. Only those with the key (PassPhrase) can successfully decrypt the encrypted data.

MQISD is a solution that allows a company to encrypt message data, which flows between WebSphere MQ (WMQ) resources. MQISD operates with WMQ v5.3 or v6.0 (and MQSeries v5.2) in Windows, Unix and Linux environments. It operates with Sender, Receiver, Server, Requestor, Cluster-Sender, Cluster-Receiver, Server Connection and Client Connection channels of the WMQ queue managers.

MQISD is a simple drop-in solution that provides cryptographic protection for WMQ queue managers. The protection can be Node-to-Node or End-to-End.

- Node-to-Node protection means all messages flowing over a channel between 2 queue managers will be encrypted.
- End-to-End protection means application-level message data flowing between 2 WMQ Client applications will be encrypted.

The MQISD solution can be configured as a queue manager channel message exit or as a channel sender/receive exit pair.

MQISD uses TEA Variant to encrypt the data. The TEA Variant is a fast block cipher algorithm with a 128-bit key. The algorithm is simple, fast and secure.

Encryption Exit Summary

The MQISD encryption exit is available in 3 formats:
- Windows DLL
- Shared library for AIX, HP-UX, Linux and Solaris
- Java JAR

The encryption exit major features are:
- Easy to set up and configure (unlike SSL)
- No application changes required
- Can be configured as either Node-to-Node or End-to-End solution
- In Node-to-Node mode, all message data flowing over a channel will be encrypted (nothing missed or forgotten)
- Extremely fast encryption/decryption methodology using TEA Variant 128-bit key
- Standard MQ feature, GET-with-Convert, is supported
- Provides high-level logging capability for encryption / decryption processing

Bonus Offer:
For each MQISD licensed purchased, receive a FREE license for Instant Secure Data API (ISDAPI). The free ISDAPI license will be for the same server as the MQISD license is for.

Pricing
The server-side security exits are provided in the format of a native DLL / shared library and are currently available for AIX, HP-UX, Linux Solaris and Windows. The pricing of Capitalware's MQ Instant Secure Data solution is on a 'per server' basis.

MQ Instant Secure Data will sell for $299.00 USD for a single server license plus 15% yearly maintenance and support fee. Volume pricing will be as follows: