Cipher Objects

Some limited legacy cipher objects are provided in the Luna FM SDK package to assist developers porting FM designs to the Luna HSM.

Supported Cipher Objects

A subset of the ProtectToolkit cipher objects and modes are supported in Luna:

Cipher Object Mode
FMCO_IDX_AES ECB, CBC, MAC_3, MAC_GEN
FMCO_IDX_DES ECB, CBC, MAC_3, MAC_GEN
FMCO_IDX_TRIPLEDES ECB, CBC, MAC_3, MAC_GEN
FMCO_IDX_DSA 0 (Sign/Verify)
FMCO_IDX_RSA (Sign/Verify) RSA_MODE_PKCS
FMCO_IDX_RSA (Enc/Dec) RSA_MODE_X509,
RSA_MODE_PKCS,
RSA_MODE_OAEP
FMCO_IDX_RSA_MD5 0
FMCO_IDX_RSA_SHA1 0
FMCO_IDX_RSA_SHA224 0
FMCO_IDX_RSA_SHA256 0
FMCO_IDX_RSA_SHA384 0
FMCO_IDX_RSA_SHA512 0
FMCO_IDX_HMACMD5 0
FMCO_IDX_HMACSHA1 0
FMCO_IDX_HMACRMD160 0
FMCO_IDX_CAST ECB, CBC
FMCO_IDX_RC2 ECB, CBC, MAC_3, MAC_GEN

Mechanisms Supported by Cipher Objects

As of Luna HSM Firmware 7.7.0, FM cipher objects support the following limited set of mechanisms:

>CKM_AES_ECB

>CKM_AES_CBC

>CKM_AES_CBC_PAD

>CKM_AES_MAC

>CKM_AES_MAC_GENERAL

>CKM_DES_ECB

>CKM_DES_CBC

>CKM_DES_CBC_PAD

>CKM_DES_MAC

>CKM_DES_MAC_GENERAL

>CKM_DES3_ECB

>CKM_DES3_CBC

>CKM_DES3_CBC_PAD

>CKM_DES3_MAC

>CKM_DES3_MAC_GENERAL

>CKM_RC2_ECB

>CKM_RC2_CBC

>CKM_RC2_CBC_PAD

>CKM_RC2_MAC

>CKM_RC2_MAC_GENERAL

>CKM_MD5_HMAC

>CKM_MD5_HMAC_GENERAL

>CKM_SHA_1_HMAC

>CKM_SHA_1_HMAC_GENERAL

>CKM_RSA_X_509

>CKM_RSA_PKCS

>CKM_RSA_PKCS_OAEP

>CKM_SHA1_RSA_PKCS

>CKM_SHA224_RSA_PKCS

>CKM_SHA256_RSA_PKCS

>CKM_SHA384_RSA_PKCS

>CKM_SHA512_RSA_PKCS

>CKM_DSA

>CKM_SHA_1

>CKM_SHA224

>CKM_SHA256

>CKM_SHA384

>CKM_SHA512