CKM_DES3_X919_MAC_GENERAL

Supported Operations

Encrypt and Decrypt

No

Sign and Verify

Yes

SignRecover and VerifyRecover

No

Digest

No

Generate Key/Key-Pair

No

Wrap and Unwrap

No

Derive

No

Available in FIPS Mode

Yes

Restrictions in FIPS Mode No MAC generation

Key Size Range (bytes) and Parameters

Minimum 16
FIPS Minimum 16
Maximum 24
Parameter CK_MAC_GENERAL_PARAMS

Description

CKM_DES3_X919_MAC and CKM_DES3_X919_MAC_GENERAL are signature generation and verification mechanisms, as defined by ANSI X9.19.  They are an extension of the single length key MAC mechanisms.  The data is MAC’ed with the left most key value in the normal manner, but the final cipher block is then decrypted (ECB mode) with the middle key value and encrypted (ECB mode) with the Right most key part.

For double length keys, the Right key component is the same as the Left key component.

Return to SafeNet ProtectToolkit-C Mechanisms