CSFNCRNG

CSFNCRNG is the IBM z/OS ICSF routine that executes the ICSF CSNBRNG API call.

It is called by the user when requesting CRYPTO services and is a base z/OS ICSF system module.

Hints

Large CPU time usage may also indicate CSNBRNG API calls with a large random number result length.  The result length can be a maximum of 8,192 bytes in length.

Significant times spent in CSFNCRNG may also indicate repetitive calls to the CRYPTO processor and is usually accompanied by use of the PAUSE/RELEASE service and large wait times in IEAVEPS1.

In the case of ICSF (CSF prefix modules), the wait is usually for the CRYPTO processor.  Investigate all CSF modules for their usage to determine what type of CRYPTO service is being used.  There may be a queue of users for the CRYPTO processors, so wait times are variable and dependent on load of CRYPTO users, the speed of and the number of CRYPTO processors.

Refer to the ICSF documentation for more information.

Refer to the IEAVPSE (Pause Service) and IEAVRLS (Release Service) in the IBM Authorized Assembler Services Reference.

Reference Sources

IBM z/OS ICSF documentation:

  • SA22-7520 IBM z/OS ICSF System Programmer’s Guide

  • SA22-7522 IBM z/OS ICSF Application Programmer’s Guide

IBM z/OS documentation:

  • SA22-7610 IBM z/OS MVS Programming: Authorized Assembler Services Reference, V2