CKM_SEED_MAC_GENERAL
Supported Operations
|
Encrypt and Decrypt |
No |
|
Sign and Verify |
Yes |
|
SignRecover and VerifyRecover |
No |
|
Digest |
No |
|
Generate Key/Key-Pair |
No |
|
Wrap and Unwrap |
No |
|
Derive |
No |
|
FIPS-approved |
No |
Key Size Range (bytes) and Parameters
| Minimum | 16 |
| FIPS Minimum |
N/A |
| Maximum | 16 |
| Parameter | CK_MAC_GENERAL_PARAMS
|
Description
General-length SEED-MAC, denoted CKM_SEED_MAC_GENERAL, is a mechanism for single and multiple part signatures and verification, based on the KISA (Korean Information Security Agency) SEED specification.
It has a single parameter, a CK_MAC_GENERAL_PARAMS structure, which specifies the output length desired from the mechanism.
The output bytes from this mechanism are taken from the start of the final SEED cipher block produced in the MACing process.
Constraints on key types and the length of data are summarized in the following table.
|
Function |
Key Type |
Data Length |
Signature Length |
|---|---|---|---|
| C_Sign | CKK_SEED
|
Any |
0-block size, as specified in parameters |
| C_Verify | CKK_SEED
|
Any |
0-block size, as specified in parameters |
Return to SafeNet ProtectToolkit-C Mechanisms
