CKM_RSA_PKCS_OAEP

Supported Operations

Encrypt and Decrypt

Yes (Single part operation only)

Sign and Verify

No

SignRecover and VerifyRecover

Yes

Digest

No

Generate Key/Key-Pair

No

Wrap and Unwrap

Yes

Derive

No

Available in FIPS Mode

Yes

Restrictions in FIPS Mode

Minimum 2048-bit modulus for signing

Key Size Range (bytes) and Parameters

Minimum 512
FIPS Minimum 1024
Maximum 4096
Parameter CK_RSA_PKCS_OAEP_PARAMS

Description

For a full description of this mechanism, refer to the PKCS#11 version 2.20 documentation from RSA Laboratories.

Return to SafeNet ProtectToolkit-C Mechanisms