CKM_WRAPKEYBLOB_DES3_CBC

Supported Operations

Encrypt and Decrypt

No

Sign and Verify

No

SignRecover and VerifyRecover

No

Digest

No

Generate Key/Key-Pair

No

Wrap and Unwrap

Yes (unwraps existing data only; cannot wrap new data)

Derive

No

FIPS-approved

Yes

Key Size Range (bytes) and Parameters

Minimum 0
FIPS Minimum 0
Maximum 0
Parameter None

Description

The CKM_WRAPKEYBLOB_AES_CBC and CKM_WRAPKEYBLOB_DES3_CBC mechanism is used to wrap a private key value using the Microsoft PRIVATEKEYBLOB format.

http://msdn.microsoft.com/en-us/library/cc250013(PROT.13).aspx

The RSA private key is formatted as shown below and then the result is encrypted by CKM_AES_CBC_PAD or CKM_DES3_CBC_PAD:

Header 12 bytes long = 07 02 00 00 00 A4 00 00 52 53 41 32

Bit Length (32 bit LE)

PubExp (32 bit LE)

Modulus (BitLength/8 bytes long LE)

P (BitLength/8 bytes long LE)

Q (BitLength/8 bytes long LE)

Dp (BitLength/8 bytes long LE)

Dq (BitLength/8 bytes long LE)

Iq (BitLength/8 bytes long LE)

D (BitLength/8 bytes long LE)

Return to SafeNet ProtectToolkit-C Mechanisms