CKM_SEED_MAC_GENERAL

Supported Operations

Encrypt and Decrypt

No

Sign and Verify

Yes

SignRecover and VerifyRecover

No

Digest

No

Generate Key/Key-Pair

No

Wrap and Unwrap

No

Derive

No

Available in FIPS Mode

No

Key Size Range (bytes) and Parameters

Minimum 16
Maximum 16
Parameter CK_MAC_GENERAL_PARAMS

Description

General-length SEED-MAC, denoted CKM_SEED_MAC_GENERAL, is a mechanism for single and multiple part signatures and verification, based on the KISA (Korean Information Security Agency) SEED specification.

It has a single parameter, a CK_MAC_GENERAL_PARAMS structure, which specifies the output length desired from the mechanism.

The output bytes from this mechanism are taken from the start of the final SEED cipher block produced in the MACing process.

Constraints on key types and the length of data are summarized in the following table.

Table 1: General-length SEED-MAC: Key and Data Length

Function

Key Type

Data Length

Signature Length

C_Sign CKK_SEED

Any

0-block size, as specified in parameters

C_Verify CKK_SEED

Any

0-block size, as specified in parameters

Return to SafeNet ProtectToolkit-C Mechanisms