CKM_RSA_PKCS
Summary
FIPS approved? | Yes |
Supported functions | Sign | Verify | Encrypt | Decrypt | Wrap | Unwrap |
Functions restricted from FIPS use | Cannot wrap |
Minimum key length (bits) | 256 |
Minimum key length for FIPS use (bits) | 2048 |
Minimum legacy key length for FIPS use (bits) | 1024 |
Maximum key length (bits) | 8192 |
Block size | 0 |
Digest size | 0 |
Key types | RSA |
Algorithms | None |
Modes | None |
Flags | None |
NOTE The flag MPE_NO_WRAP is assigned to several mechanisms, including this one. When the HSM policy “Allow NonFIPS Algorithms” is disabled, mechanisms with the MPE_NO_WRAP flag are not allowed to wrap objects. When the policy is enabled, these mechanisms are allowed to wrap objects.