CKM_RSA_PKCS_KEY_PAIR_GEN

Supported Operations

Encrypt and Decrypt No
Sign and Verify No
SignRecover and VerifyRecover No
Digest No
Generate Key/Key-Pair Yes
Wrap and Unwrap No
Derive No
Available in FIPS Mode Yes
Restrictions in FIPS Mode None

Key Size Range (bits) and Parameters

Minimum 512
FIPS Minimum 2048
Maximum 4096
Parameter CK_ULONG (optional)

Description

The mechanism denoted CKM_RSA_PKCS_KEY_PAIR_GEN is a Key Pair Generation mechanism to create a new RSA key pair of objects using the method described in PKCS#1. It behaves as described in the PKCS#11 version 2.20 documentation, with the following exception:

This SafeNet ProtectToolkit-C mechanism has an optional parameter of type CK_ULONG which, if provided, will specify the size in bits of the random public exponent.

Return to SafeNet ProtectToolkit-C Mechanisms