CKM_SEED_KEY_GEN

Supported Operations

Encrypt and Decrypt Yes
Sign and Verify No
SignRecover and VerifyRecover No
Digest No
Generate Key/Key-Pair Yes
Wrap and Unwrap No
Derive No
Available in FIPS Mode No

Key Size Range (bytes) and Parameters

Minimum 16
Maximum 16
Parameter None

Description

The SEED key generation mechanism, denoted CKM_SEED_KEY_GEN, is a key generation mechanism for the Korean Information Security Agency’s SEED algorithm.

The mechanism does not have a parameter, and it generates SEED keys 16 bytes in length.

The mechanism contributes the CKA_CLASS, CKA_KEY_TYPE, CKA_VALUE_LEN, and CKA_VALUE attributes to the new key. Other attributes supported by the SEED key type (specifically, the flags indicating which functions the key supports) may be specified in the template for the key, or they may be assigned default initial values.

For this mechanism, the ulMinKeySize and ulMaxKeySize fields of the CK_MECHANISM_INFO structure specify the supported range of SEED key sizes, in bytes, which is 16.

The algorithm block size is 16 bytes.

Return to ProtectToolkit-C Mechanisms