Mechanism Summary

The following table provides a summary of all of the supported mechanisms in this release.

Mechanism FIPS Approved? Supported Functions Min Key Length (bits) Min Key Length for FIPS Use (bits) Min Legacy Key Length for FIPS Use (bits) Max Key Length (bits) Block Size Digest Size Key Types Algorithms Modes Flags
CKM_AES_CBC Yes Encrypt | Decrypt | Wrap | Unwrap 128 N/A 128 256 16 0 AES AES CBC Extractable
CKM_AES_CBC_ENCRYPT_DATA Yes Derive 128 N/A 128 256 0 0 AES None None None
CKM_AES_CBC_PAD Yes Encrypt | Decrypt | Wrap | Unwrap 128 N/A 128 256 16 0 AES AES CBC_PAD Extractable
CKM_AES_CBC_PAD_IPSEC No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 256 16 0 AES AES CBC_PAD_IPSEC Extractable
CKM_AES_CFB8 Yes Encrypt | Decrypt 128 N/A 128 256 16 1 AES AES CFB Extractable
CKM_AES_CFB128 Yes Encrypt | Decrypt 128 N/A 128 256 16 16 AES AES CFB Extractable
CKM_AES_CMAC Yes Sign | Verify 128 N/A 128 256 16 0 AES AES MAC Extractable | CMAC
CKM_AES_CMAC_GENERAL Yes Sign | Verify 128 N/A 128 256 16 0 AES AES MAC Extractable | CMAC
CKM_AES_CTR Yes Encrypt | Decrypt | Wrap | Unwrap 128 N/A 128 256 16 0 AES AES CTR Extractable
CKM_AES_ECB Yes Encrypt | Decrypt | Wrap | Unwrap 128 N/A 128 256 16 0 AES AES ECB Extractable
CKM_AES_ECB_ENCRYPT_DATA Yes Derive 128 N/A 128 256 0 0 AES None None None
CKM_AES_GCM Yes Encrypt | Decrypt 128 N/A 128 256 16 0 AES AES GCM Extractable | Accumulating
CKM_AES_GMAC Yes Sign | Verify 128 N/A 128 256 16 0 AES AES GCM Extractable | Accumulating
CKM_AES_KEY_GEN Yes Generate Key 128 N/A 128 256 0 0 AES None None None
CKM_AES_KW Yes Encrypt | Decrypt | Wrap | Unwrap 128 N/A 128 256 8 0 AES AES KEYWRAP Extractable | Accumulating
CKM_AES_KWP Yes Encrypt | Decrypt | Wrap | Unwrap 128 N/A 128 256 8 0 AES AES KEYWRAP_PAD Extractable | Accumulating
CKM_AES_MAC Yes Sign | Verify 128 N/A 128 256 16 0 AES AES MAC Extractable
CKM_AES_MAC_GENERAL Yes Sign | Verify 128 N/A 128 256 16 0 AES AES MAC Extractable
CKM_AES_OFB Yes Encrypt | Decrypt 128 N/A 128 256 16 0 AES AES OFB Extractable
CKM_AES_XTS Yes Encrypt | Decrypt 128 N/A 128 256 16 0 AES AES XTS Extractable
CKM_ARIA_CBC No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 256 16 0 ARIA ARIA CBC Extractable
CKM_ARIA_CBC_ENCRYPT_DATA No Derive 128 N/A N/A 256 0 0 ARIA None None None
CKM_ARIA_CBC_PAD No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 256 16 0 ARIA ARIA CBC_PAD Extractable
CKM_ARIA_CFB8 No Encrypt | Decrypt 128 N/A N/A 256 16 1 ARIA ARIA CFB Extractable
CKM_ARIA_CFB128 No Encrypt | Decrypt 128 N/A N/A 256 16 16 ARIA ARIA CFB Extractable
CKM_ARIA_CMAC No Sign | Verify 128 N/A N/A 256 16 0 ARIA ARIA MAC Extractable | CMAC
CKM_ARIA_CMAC_GENERAL No Sign | Verify 128 N/A N/A 256 16 0 ARIA ARIA MAC Extractable | CMAC
CKM_ARIA_CTR No Encrypt | Decrypt 128 N/A N/A 256 16 0 ARIA ARIA CTR Extractable
CKM_ARIA_ECB No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 256 16 0 ARIA ARIA ECB Extractable
CKM_ARIA_ECB_ENCRYPT_DATA No Derive 128 N/A N/A 256 0 0 ARIA None None None
CKM_ARIA_KEY_GEN No Generate Key 128 N/A N/A 256 0 0 ARIA None None None
CKM_ARIA_L_CBC No Decrypt | Unwrap 128 N/A N/A 256 16 0 ARIA ARIA CBC Extractable
CKM_ARIA_L_CBC_PAD No Decrypt | Unwrap 128 N/A N/A 256 16 0 ARIA ARIA CBC_PAD Extractable
CKM_ARIA_L_ECB No Decrypt | Unwrap 128 N/A N/A 256 16 0 ARIA ARIA ECB Extractable
CKM_ARIA_L_MAC No Verify 128 N/A N/A 256 16 0 ARIA ARIA MAC Extractable
CKM_ARIA_L_MAC_GENERAL No Verify 128 N/A N/A 256 16 0 ARIA ARIA MAC Extractable
CKM_ARIA_MAC No Sign | Verify 128 N/A N/A 256 16 0 ARIA ARIA MAC Extractable
CKM_ARIA_MAC_GENERAL No Sign | Verify 128 N/A N/A 256 16 0 ARIA ARIA MAC Extractable
CKM_ARIA_OFB No Encrypt | Decrypt 128 N/A N/A 256 16 0 ARIA ARIA OFB Extractable
CKM_CAST3_CBC No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 64 8 0 CAST3 CAST3 CBC Extractable
CKM_CAST3_CBC_PAD No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 64 8 0 CAST3 CAST3 CBC_PAD Extractable
CKM_CAST3_ECB No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 64 8 0 CAST3 CAST3 ECB Extractable
CKM_CAST3_KEY_GEN No Generate Key 64 N/A N/A 64 0 0 CAST3 None None None
CKM_CAST3_MAC No Sign | Verify 64 N/A N/A 64 8 0 CAST3 CAST3 MAC Extractable
CKM_CAST3_MAC_GENERAL No Sign | Verify 64 N/A N/A 64 8 0 CAST3 CAST3 MAC Extractable
CKM_CAST5_CBC No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 128 8 0 CAST5 CAST5 CBC Extractable
CKM_CAST5_CBC_PAD No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 128 8 0 CAST5 CAST5 CBC_PAD Extractable
CKM_CAST5_ECB No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 128 8 0 CAST5 CAST5 ECB Extractable
CKM_CAST5_KEY_GEN No Generate Key 64 N/A N/A 128 0 0 CAST5 None None None
CKM_CAST5_MAC No Sign | Verify 64 N/A N/A 128 8 0 CAST5 CAST5 MAC Extractable
CKM_CAST5_MAC_GENERAL No Sign | Verify 64 N/A N/A 128 8 0 CAST5 CAST5 MAC Extractable
CKM_DES_CBC No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 64 8 0 DES DES CBC Extractable
CKM_DES_CBC_ENCRYPT_DATA No Derive 64 N/A N/A 64 0 0 Symmetric None None None
CKM_DES_CBC_PAD No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 64 8 0 DES DES CBC_PAD Extractable
CKM_DES_CFB8 Yes Encrypt | Decrypt 128 192 128 192 8 1 DES3 DES3 CFB Extractable
CKM_DES_CFB64 Yes Encrypt | Decrypt 128 192 128 192 8 8 DES3 DES3 CFB Extractable
CKM_DES_ECB No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 64 8 0 DES DES ECB Extractable
CKM_DES_ECB_ENCRYPT_DATA No Derive 64 N/A N/A 64 0 0 Symmetric None None None
CKM_DES_KEY_GEN No Generate Key 64 N/A N/A 64 0 0 DES None None None
CKM_DES_MAC No Sign | Verify 64 N/A N/A 64 8 0 DES DES MAC Extractable
CKM_DES_MAC_GENERAL No Sign | Verify 64 N/A N/A 64 8 0 DES DES MAC Extractable
CKM_DES_OFB64 Yes Encrypt | Decrypt 128 192 128 192 8 0 DES3 DES3 OFB Extractable
CKM_DES2_DUKPT_DATA No Derive 128 N/A N/A 192 0 0 Symmetric None None None
CKM_DES2_DUKPT_DATA_RESP No Derive 128 N/A N/A 192 0 0 Symmetric None None None
CKM_DES2_DUKPT_MAC No Derive 128 N/A N/A 192 0 0 Symmetric None None None
CKM_DES2_DUKPT_MAC_RESP No Derive 128 N/A N/A 192 0 0 Symmetric None None None
CKM_DES2_DUKPT_PIN No Derive 128 N/A N/A 192 0 0 Symmetric None None None
CKM_DES2_KEY_GEN Yes Generate Key 128 N/A 128 128 0 0 DES2 None None None
CKM_DES3_CBC Yes Encrypt | Decrypt | Wrap | Unwrap 128 192 128 192 8 0 DES3 DES3 CBC Extractable
CKM_DES3_CBC_ENCRYPT_DATA Yes Derive 128 192 128 192 0 0 Symmetric None None None
CKM_DES3_CBC_PAD Yes Encrypt | Decrypt | Wrap | Unwrap 128 192 128 192 8 0 DES3 DES3 CBC_PAD Extractable
CKM_DES3_CBC_PAD_IPSEC No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 192 8 0 DES3 DES3 CBC_PAD_IPSEC Extractable
CKM_DES3_CMAC Yes Sign | Verify 128 192 128 192 8 0 DES3 DES3 MAC Extractable | CMAC
CKM_DES3_CMAC_GENERAL Yes Sign | Verify 128 192 128 192 8 0 DES3 DES3 MAC Extractable | CMAC
CKM_DES3_CTR Yes Encrypt | Decrypt | Wrap | Unwrap 128 192 128 192 8 0 DES3 DES3 CTR Extractable
CKM_DES3_ECB Yes Encrypt | Decrypt | Wrap | Unwrap 128 192 128 192 8 0 DES3 DES3 ECB Extractable
CKM_DES3_ECB_ENCRYPT_DATA Yes Derive 128 192 128 192 0 0 Symmetric None None None
CKM_DES3_KEY_GEN Yes Generate Key 192 N/A 192 192 0 0 DES3 None None None
CKM_DES3_MAC Yes Sign | Verify 128 192 128 192 8 0 DES3 DES3 MAC Extractable
CKM_DES3_MAC_GENERAL Yes Sign | Verify 128 192 128 192 8 0 DES3 DES3 MAC Extractable
CKM_DES3_X919_MAC No Sign | Verify 128 N/A N/A 192 8 0 DES3 DES3 MAC Extractable
CKM_DH_PKCS_DERIVE No Derive 512 N/A N/A 2048 0 0 DH None None None
CKM_DH_PKCS_KEY_PAIR_GEN No Generate Key Pair 512 N/A N/A 2048 0 0 DH None None None
CKM_DH_PKCS_PARAMETER_GEN No Generate Key 512 N/A N/A 2048 0 0 DH None None None
CKM_DSA Yes Sign | Verify 1024 2048 1024 3072 0 0 DSA DSA None None
CKM_DSA_KEY_PAIR_GEN Yes Generate Key Pair 1024 2048 1024 3072 0 0 DSA None None None
CKM_DSA_PARAMETER_GEN Yes Generate Key 1024 2048 1024 3072 0 0 DSA None None None
CKM_DSA_SHA1 Yes Sign | Verify 1024 2048 1024 3072 64 20 DSA SHA None Extractable
CKM_DSA_SHA224 Yes Sign | Verify 1024 2048 1024 3072 64 28 DSA SHA224 None Extractable
CKM_DSA_SHA256 Yes Sign | Verify 1024 2048 1024 3072 64 32 DSA SHA256 None Extractable
CKM_EC_EDWARDS_KEY_PAIR_GEN No Generate Key Pair 256 N/A N/A 256 0 0 EDDSA None None None
CKM_EC_KEY_PAIR_GEN Yes Generate Key Pair 105 224 160 571 0 0 ECDSA None None None
CKM_EC_KEY_PAIR_GEN_W_EXTRA_BITS Yes Generate Key Pair 105 224 160 571 0 0 ECDSA None None Extra bits
CKM_EC_MONTGOMERY_KEY_PAIR_GEN Yes Generate Key Pair 256 N/A 256 256 0 0 EC_MONT None None None
CKM_ECDH1_COFACTOR_DERIVE Yes Derive 105 224 160 571 0 0 ECDSA None None None
CKM_ECDH1_DERIVE Yes Derive 105 224 160 571 0 0 ECDSA | EC_MONT | BIP32 None None None
CKM_ECDSA Yes Sign | Verify 105 224 160 571 0 0 ECDSA ECDSA None None
CKM_ECDSA_GBCS_SHA256 No Sign | Verify 256 N/A N/A 256 64 32 ECDSA SHA256 None Extractable
CKM_ECDSA_SHA1 Yes Sign | Verify 105 224 160 571 64 20 ECDSA SHA None Extractable
CKM_ECDSA_SHA224 Yes Sign | Verify 105 224 160 571 64 28 ECDSA SHA224 None Extractable
CKM_ECDSA_SHA256 Yes Sign | Verify 105 224 160 571 64 32 ECDSA SHA256 None Extractable
CKM_ECDSA_SHA384 Yes Sign | Verify 105 224 160 571 128 48 ECDSA SHA384 None Extractable
CKM_ECDSA_SHA512 Yes Sign | Verify 105 224 160 571 128 * ECDSA SHA512 None Extractable
CKM_ECIES Yes Encrypt | Decrypt 105 224 160 571 0 0 ECDSA | EC_MONT | BIP32 None None Accumulating
CKM_EDDSA No Sign | Verify 256 N/A N/A 256 0 0 EDDSA SHA512 None Extractable
CKM_EDDSA_NACL No Sign | Verify 256 N/A N/A 256 0 0 EDDSA SHA512 None Extractable
CKM_GENERIC_SECRET_KEY_GEN Yes Generate Key 8 N/A 112 4096 0 0 None None None None
CKM_HAS160 No Digest 0 N/A N/A 0 64 20 None HAS160 None Extractable | Korean
CKM_KCDSA_HAS160 No Sign | Verify 1024 N/A N/A 2048 64 20 KCDSA HAS160 None Korean
CKM_KCDSA_HAS160_NO_PAD No Sign | Verify 1024 N/A N/A 2048 64 20 KCDSA HAS160 None Korean
CKM_KCDSA_KEY_PAIR_GEN No Generate Key Pair 1024 N/A N/A 2048 0 0 KCDSA None None Korean
CKM_KCDSA_PARAMETER_GEN No Generate Key 1024 N/A N/A 2048 0 0 KCDSA None None Korean
CKM_KCDSA_SHA1 No Sign | Verify 1024 N/A N/A 2048 64 20 KCDSA SHA None Korean
CKM_KCDSA_SHA1_NO_PAD No Sign | Verify 1024 N/A N/A 2048 64 20 KCDSA SHA None Korean
CKM_KCDSA_SHA224 No Sign | Verify 1024 N/A N/A 2048 64 28 KCDSA SHA224 None Korean
CKM_KCDSA_SHA224_NO_PAD No Sign | Verify 1024 N/A N/A 2048 64 28 KCDSA SHA224 None Korean
CKM_KCDSA_SHA256 No Sign | Verify 1024 N/A N/A 2048 64 32 KCDSA SHA256 None Korean
CKM_KCDSA_SHA256_NO_PAD No Sign | Verify 1024 N/A N/A 2048 64 32 KCDSA SHA256 None Korean
CKM_KCDSA_SHA384 No Sign | Verify 1024 N/A N/A 2048 128 48 KCDSA SHA384 None Korean
CKM_KCDSA_SHA384_NO_PAD No Sign | Verify 1024 N/A N/A 2048 128 48 KCDSA SHA384 None Korean
CKM_KCDSA_SHA512 No Sign | Verify 1024 N/A N/A 2048 128 * KCDSA SHA512 None Korean
CKM_KCDSA_SHA512_NO_PAD No Sign | Verify 1024 N/A N/A 2048 128 * KCDSA SHA512 None Korean
CKM_KEY_WRAP_SET_OAEP No Wrap | Unwrap 256 N/A N/A 8192 0 0 RSA None None None
CKM_MD2 No Digest 0 N/A N/A 0 16 16 None MD2 None Extractable
CKM_MD2_KEY_DERIVATION No Derive 8 N/A N/A 4096 16 16 Symmetric None None None
CKM_MD5_HMAC No Sign | Verify 8 N/A N/A 4096 64 16 Symmetric MD5 HMAC Extractable
CKM_MD5_HMAC_GENERAL No Sign | Verify 8 N/A N/A 4096 64 16 Symmetric MD5 HMAC Extractable
CKM_MD5_KEY_DERIVATION No Derive 8 N/A N/A 4096 64 16 Symmetric None None None
CKM_NIST_PRF_KDF Yes Derive 8 N/A 112 4096 0 0 Symmetric None None None
CKM_PBE_MD2_DES_CBC No Generate Key 64 N/A N/A 64 16 16 None None None None
CKM_PBE_SHA1_CAST5_CBC No Generate Key 64 N/A N/A 128 64 20 None None None None
CKM_PBE_SHA1_DES2_EDE_CBC No Generate Key 128 N/A N/A 128 64 20 None None None None
CKM_PBE_SHA1_DES2_EDE_CBC_OLD No Generate Key 128 N/A N/A 128 64 20 None None None None
CKM_PBE_SHA1_DES3_EDE_CBC No Generate Key 192 N/A N/A 192 64 20 None None None None
CKM_PBE_SHA1_DES3_EDE_CBC_OLD No Generate Key 192 N/A N/A 192 64 20 None None None None
CKM_PBE_SHA1_RC2_40_CBC No Generate Key 40 N/A N/A 40 64 20 None None None None
CKM_PBE_SHA1_RC2_128_CBC No Generate Key 128 N/A N/A 128 64 20 None None None None
CKM_PBE_SHA1_RC4_40 No Generate Key 40 N/A N/A 40 64 20 None None None None
CKM_PBE_SHA1_RC4_128 No Generate Key 128 N/A N/A 128 64 20 None None None None
CKM_PKCS5_PBKD2 No Generate Key 8 N/A N/A 4096 0 0 None None None None
CKM_PRF_KDF No Derive 8 N/A N/A 4096 0 0 Symmetric None None None
CKM_RC2_CBC No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 1024 8 0 RC2 RC2 CBC Extractable
CKM_RC2_CBC_PAD No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 1024 8 0 RC2 RC2 CBC_PAD Extractable
CKM_RC2_ECB No Encrypt | Decrypt | Wrap | Unwrap 64 N/A N/A 1024 8 0 RC2 RC2 ECB Extractable
CKM_RC2_KEY_GEN No Generate Key 64 N/A N/A 1024 0 0 RC2 None None None
CKM_RC2_MAC No Sign | Verify 64 N/A N/A 1024 8 0 RC2 RC2 MAC Extractable
CKM_RC2_MAC_GENERAL No Sign | Verify 64 N/A N/A 1024 8 0 RC2 RC2 MAC Extractable
CKM_RC4 No Encrypt | Decrypt 64 N/A N/A 2048 0 0 RC4 RC4 STREAM Extractable
CKM_RC4_KEY_GEN No Generate Key 64 N/A N/A 2048 0 0 RC4 None None None
CKM_RC5_CBC No Encrypt | Decrypt 64 N/A N/A 2040 8 0 RC5 RC5 CBC Extractable
CKM_RC5_CBC_PAD No Encrypt | Decrypt 64 N/A N/A 2040 8 0 RC5 RC5 CBC_PAD Extractable
CKM_RC5_ECB No Encrypt | Decrypt 64 N/A N/A 2040 8 0 RC5 RC5 ECB Extractable
CKM_RC5_KEY_GEN No Generate Key 64 N/A N/A 2040 0 0 RC5 None None None
CKM_RC5_MAC No Sign | Verify 64 N/A N/A 2040 8 0 RC5 RC5 MAC Extractable
CKM_RC5_MAC_GENERAL No Sign | Verify 64 N/A N/A 2040 8 0 RC5 RC5 MAC Extractable
CKM_RSA_FIPS_186_3_AUX_PRIME_KEY_PAIR_GEN Yes Generate Key Pair 1024 2048 1024 4096 0 0 RSA None None None
CKM_RSA_FIPS_186_3_PRIME_KEY_PAIR_GEN Yes Generate Key Pair 2048 N/A 2048 4096 0 0 RSA None None None
CKM_RSA_PKCS Yes Sign | Verify | Encrypt | Decrypt | Wrap | Unwrap 256 2048 1024 8192 0 0 RSA None None None
CKM_RSA_PKCS_KEY_PAIR_GEN No Generate Key Pair 256 N/A N/A 8192 0 0 RSA None None None
CKM_RSA_PKCS_OAEP Yes Encrypt | Decrypt | Wrap | Unwrap 256 2048 1024 8192 0 0 RSA None None None
CKM_RSA_PKCS_PSS Yes Sign | Verify 256 2048 1024 8192 0 0 RSA None None None | PSS
CKM_RSA_X_509 No Encrypt | Decrypt 256 N/A N/A 8192 0 0 RSA None None None
CKM_RSA_X9_31 Yes Sign | Verify 1024 2048 1024 8192 0 0 RSA None None Extractable | X9.31
CKM_RSA_X9_31_KEY_PAIR_GEN No Generate Key Pair 1024 N/A N/A 8192 0 0 RSA None None X9.31
CKM_RSA_X9_31_NON_FIPS No Sign | Verify 1024 N/A N/A 8192 0 0 RSA None None Extractable | X9.31 | Non-FIPS X9.31
CKM_SEED_CBC No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 128 16 0 SEED SEED CBC Extractable | Korean
CKM_SEED_CBC_PAD No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 128 16 0 SEED SEED CBC_PAD Extractable | Korean
CKM_SEED_CMAC No Sign | Verify 128 N/A N/A 128 16 0 SEED SEED MAC Extractable | Korean | CMAC
CKM_SEED_CMAC_GENERAL No Sign | Verify 128 N/A N/A 128 16 0 SEED SEED MAC Extractable | Korean | CMAC
CKM_SEED_CTR No Encrypt | Decrypt 128 N/A N/A 128 16 0 SEED SEED CTR Extractable | Korean
CKM_SEED_ECB No Encrypt | Decrypt | Wrap | Unwrap 128 N/A N/A 128 16 0 SEED SEED ECB Extractable | Korean
CKM_SEED_KEY_GEN No Generate Key 128 N/A N/A 128 0 0 SEED None None Korean
CKM_SEED_MAC No Sign | Verify 128 N/A N/A 128 16 0 SEED SEED MAC Extractable | Korean
CKM_SEED_MAC_GENERAL No Sign | Verify 128 N/A N/A 128 16 0 SEED SEED MAC Extractable | Korean
CKM_SHA_1 Yes Digest 0 N/A 0 0 64 20 None SHA None Extractable
CKM_SHA_1_HMAC Yes Sign | Verify 8 112 80 4096 64 20 Symmetric SHA HMAC Extractable
CKM_SHA_1_HMAC_GENERAL Yes Sign | Verify 8 112 80 4096 64 20 Symmetric SHA HMAC Extractable
CKM_SHA1_EDDSA No Sign | Verify 256 N/A N/A 256 64 20 EDDSA SHA None Extractable
CKM_SHA1_EDDSA_NACL No Sign | Verify 256 N/A N/A 256 64 20 EDDSA SHA None Extractable
CKM_SHA1_KEY_DERIVATION No Derive 8 N/A N/A 4096 64 20 Symmetric None None None
CKM_SHA1_RSA_PKCS Yes Sign | Verify 256 2048 1024 8192 64 20 RSA SHA None Extractable
CKM_SHA1_RSA_PKCS_PSS Yes Sign | Verify 256 2048 1024 8192 64 20 RSA SHA None Extractable | PSS
CKM_SHA1_RSA_X9_31 Yes Sign | Verify 1024 2048 1024 8192 64 20 RSA SHA None Extractable | X9.31
CKM_SHA1_RSA_X9_31_NON_FIPS No Sign | Verify 1024 N/A N/A 8192 64 20 RSA SHA None Extractable | X9.31 | Non-FIPS X9.31
CKM_SHA224 Yes Digest 0 N/A 0 0 64 28 None SHA224 None Extractable
CKM_SHA224_EDDSA No Sign | Verify 256 N/A N/A 256 64 28 EDDSA SHA224 None Extractable
CKM_SHA224_EDDSA_NACL No Sign | Verify 256 N/A N/A 256 64 28 EDDSA SHA224 None Extractable
CKM_SHA224_HMAC Yes Sign | Verify 8 112 80 4096 64 28 Symmetric SHA224 HMAC Extractable
CKM_SHA224_HMAC_GENERAL Yes Sign | Verify 8 112 80 4096 64 28 Symmetric SHA224 HMAC Extractable
CKM_SHA224_KEY_DERIVATION No Derive 8 N/A N/A 4096 64 28 Symmetric None None None
CKM_SHA224_RSA_PKCS Yes Sign | Verify 256 2048 1024 8192 64 28 RSA SHA224 None Extractable
CKM_SHA224_RSA_PKCS_PSS Yes Sign | Verify 512 2048 1024 8192 64 28 RSA SHA224 None Extractable | PSS
CKM_SHA224_RSA_X9_31 Yes Sign | Verify 1024 2048 1024 8192 64 28 RSA SHA224 None Extractable | X9.31
CKM_SHA224_RSA_X9_31_NON_FIPS No Sign | Verify 1024 N/A N/A 8192 64 28 RSA SHA224 None Extractable | X9.31 | Non-FIPS X9.31
CKM_SHA256 Yes Digest 0 N/A 0 0 64 32 None SHA256 None Extractable
CKM_SHA256_EDDSA No Sign | Verify 256 N/A N/A 256 64 32 EDDSA SHA256 None Extractable
CKM_SHA256_EDDSA_NACL No Sign | Verify 256 N/A N/A 256 64 32 EDDSA SHA256 None Extractable
CKM_SHA256_HMAC Yes Sign | Verify 8 112 80 4096 64 32 Symmetric SHA256 HMAC Extractable
CKM_SHA256_HMAC_GENERAL Yes Sign | Verify 8 112 80 4096 64 32 Symmetric SHA256 HMAC Extractable
CKM_SHA256_KEY_DERIVATION No Derive 8 N/A N/A 4096 64 32 Symmetric None None None
CKM_SHA256_RSA_PKCS Yes Sign | Verify 256 2048 1024 8192 64 32 RSA SHA256 None Extractable
CKM_SHA256_RSA_PKCS_PSS Yes Sign | Verify 512 2048 1024 8192 64 32 RSA SHA256 None Extractable | PSS
CKM_SHA256_RSA_X9_31 Yes Sign | Verify 1024 2048 1024 8192 64 32 RSA SHA256 None Extractable | X9.31
CKM_SHA256_RSA_X9_31_NON_FIPS No Sign | Verify 1024 N/A N/A 8192 64 32 RSA SHA256 None Extractable | X9.31 | Non-FIPS X9.31
CKM_SHA384 Yes Digest 0 N/A 0 0 128 48 None SHA384 None Extractable
CKM_SHA384_EDDSA No Sign | Verify 256 N/A N/A 256 128 48 EDDSA SHA384 None Extractable
CKM_SHA384_EDDSA_NACL No Sign | Verify 256 N/A N/A 256 128 48 EDDSA SHA384 None Extractable
CKM_SHA384_HMAC Yes Sign | Verify 8 112 80 4096 128 48 Symmetric SHA384 HMAC Extractable
CKM_SHA384_HMAC_GENERAL Yes Sign | Verify 8 112 80 4096 128 48 Symmetric SHA384 HMAC Extractable
CKM_SHA384_KEY_DERIVATION No Derive 8 N/A N/A 4096 128 48 Symmetric None None None
CKM_SHA384_RSA_PKCS Yes Sign | Verify 256 2048 1024 8192 128 48 RSA SHA384 None Extractable
CKM_SHA384_RSA_PKCS_PSS Yes Sign | Verify 512 2048 1024 8192 128 48 RSA SHA384 None Extractable | PSS
CKM_SHA384_RSA_X9_31 Yes Sign | Verify 1024 2048 1024 8192 128 48 RSA SHA384 None Extractable | X9.31
CKM_SHA384_RSA_X9_31_NON_FIPS No Sign | Verify 1024 N/A N/A 8192 128 48 RSA SHA384 None Extractable | X9.31 | Non-FIPS X9.31
CKM_SHA512 Yes Digest 0 N/A 0 0 128 * None SHA512 None Extractable
CKM_SHA512_EDDSA No Sign | Verify 256 N/A N/A 256 128 * EDDSA SHA512 None Extractable
CKM_SHA512_EDDSA_NACL No Sign | Verify 256 N/A N/A 256 128 * EDDSA SHA512 None Extractable
CKM_SHA512_HMAC Yes Sign | Verify 8 112 80 4096 128 * Symmetric SHA512 HMAC Extractable
CKM_SHA512_HMAC_GENERAL Yes Sign | Verify 8 112 80 4096 128 * Symmetric SHA512 HMAC Extractable
CKM_SHA512_KEY_DERIVATION No Derive 8 N/A N/A 4096 128 * Symmetric None None None
CKM_SHA512_RSA_PKCS Yes Sign | Verify 256 2048 1024 8192 128 * RSA SHA512 None Extractable
CKM_SHA512_RSA_PKCS_PSS Yes Sign | Verify 1024 2048 1024 8192 128 * RSA SHA512 None Extractable | PSS
CKM_SHA512_RSA_X9_31 Yes Sign | Verify 1024 2048 1024 8192 128 * RSA SHA512 None Extractable | X9.31
CKM_SHA512_RSA_X9_31_NON_FIPS No Sign | Verify 1024 N/A N/A 8192 128 * RSA SHA512 None Extractable | X9.31 | Non-FIPS X9.31
CKM_SM3 No Digest 0 N/A N/A 0 64 32 None SM3 None None
CKM_SM3_HMAC No Sign | Verify 8 N/A N/A 4096 64 32 Symmetric SM3 HMAC None
CKM_SM3_HMAC_GENERAL No Sign | Verify 8 N/A N/A 4096 64 32 Symmetric SM3 HMAC None
CKM_SM3_KEY_DERIVATION No Derive 8 N/A N/A 4096 64 32 Symmetric None None None
CKM_SSL3_KEY_AND_MAC_DERIVE No Derive 384 N/A N/A 384 0 0 Symmetric None None None
CKM_SSL3_MASTER_KEY_DERIVE No Derive 384 N/A N/A 384 0 0 Symmetric None None None
CKM_SSL3_MD5_MAC No Sign | Verify 128 N/A N/A 128 64 16 Symmetric MD5 HMAC Extractable
CKM_SSL3_PRE_MASTER_KEY_GEN No Generate Key 384 N/A N/A 384 0 0 None None None None
CKM_SSL3_SHA1_MAC No Sign | Verify 160 N/A N/A 160 64 20 Symmetric SHA HMAC Extractable
CKM_X9_42_DH_DERIVE Yes Derive 1024 N/A 2048 4096 0 0 X9_42_DH None None None
CKM_X9_42_DH_HYBRID_DERIVE Yes Derive 1024 N/A 2048 4096 0 0 X9_42_DH None None None
CKM_X9_42_DH_KEY_PAIR_GEN Yes Generate Key Pair 1024 N/A 2048 4096 0 0 X9_42_DH None None None
CKM_X9_42_DH_PARAMETER_GEN Yes Generate Key 1024 N/A 2048 4096 0 0 X9_42_DH None None None
CKM_XOR_BASE_AND_DATA_W_KDF No Encrypt | Decrypt 8 N/A N/A 4096 0 0 Symmetric None OFB None


Customer Support Portal

SafeNet Luna PCIe HSM 7.2 Product Documentation  25 November 2019  Copyright 2001-2019 Thales. All rights reserved.