CKM_SEED_MAC
Supported Operations
|
Encrypt and Decrypt |
No |
|
Sign and Verify |
Yes |
|
SignRecover and VerifyRecover |
No |
|
Digest |
No |
|
Generate Key/Key-Pair |
No |
|
Wrap and Unwrap |
No |
|
Derive |
No |
|
FIPS-approved |
No |
Key Size Range (bytes) and Parameters
| Minimum | 16 |
| FIPS Minimum |
N/A |
| Maximum | 16 |
| Parameter | None |
Description
SEED-MAC, denoted by CKM_SEED_MAC, is a special case of the general-length SEED-MAC mechanism. SEED-MAC always produces and verifies MACs that are eight bytes in length. It does not have a parameter.
Constraints on key types and the length of data are summarized in the following table.
|
Function |
Key Type |
Data Length |
Signature Length |
|---|---|---|---|
| C_Sign | CKK_SEED
|
any |
½ block size (8 bytes) |
| C_Verify | CKK_SEED
|
any |
½ block size (8 bytes) |
Return to SafeNet ProtectToolkit-C Mechanisms
