CKM_SEED_KEY_GEN

Supported Operations

Encrypt and Decrypt	Yes
Sign and Verify	No
SignRecover and VerifyRecover	No
Digest	No
Generate Key/Key-Pair	Yes
Wrap and Unwrap	No
Derive	No
FIPS-approved	No

Key Size Range (bytes) and Parameters

Minimum	16
FIPS Minimum	N/A
Maximum	16
Parameter	None

Description

The SEED key generation mechanism, denoted CKM_SEED_KEY_GEN, is a key generation mechanism for the Korean Information Security Agency’s SEED algorithm.

The mechanism does not have a parameter, and it generates SEED keys 16 bytes in length.

The mechanism contributes the CKA_CLASS, CKA_KEY_TYPE, CKA_VALUE_LEN, and CKA_VALUE attributes to the new key. Other attributes supported by the SEED key type (specifically, the flags indicating which functions the key supports) may be specified in the template for the key, or they may be assigned default initial values.

For this mechanism, the ulMinKeySize and ulMaxKeySize fields of the CK_MECHANISM_INFO structure specify the supported range of SEED key sizes, in bytes, which is 16.

The algorithm block size is 16 bytes.

Return to SafeNet ProtectToolkit-C Mechanisms