CKM_AES_CCM
Supported Operations
| Encrypt and Decrypt | Yes |
| Sign and Verify | No |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | No |
| Derive | No |
| Available in FIPS Mode | Yes |
| Restrictions in FIPS Mode | None |
Key Size Range (bytes) and Parameters
| Minimum | 16 |
| FIPS Minimum | 16 |
| Maximum | 32 |
| Parameter | CK_CCM_PARAMS
|
Description
For a full description of this mechanism, refer to the PKCS#11 version 2.30 documentation from RSA Laboratories.
AES CCM is a single part encrypt/decrypt operation; the following sequence of PKCS#11 function calls may be used in applications:
C_EncryptInit(...) C_Encrypt(...) ... C_DecryptInit(...) C_Decrypt(...)
PTK's implementation of AES CCM assumes the following limitations:
>maximum plain text size is 130032 octets, tested under the following conditions:
•Key size: 16 octets
•Nonce size: 7-13 octets
•AAD size: 32 octets
•Tag length: 8 octets
•MAC length: 4, 6, 8, 10, 12, 14, or 16 octets
Return to SafeNet ProtectToolkit-C Mechanisms
