CKM_SEED_MAC

Supported Operations

Encrypt and Decrypt No
Sign and Verify Yes
SignRecover and VerifyRecover No
Digest No
Generate Key/Key-Pair No
Wrap and Unwrap No
Derive No
Available in FIPS Mode No

Key Size Range (bytes) and Parameters

Minimum 16
Maximum 16
Parameter None

Description

SEED-MAC, denoted by CKM_SEED_MAC, is a special case of the general-length SEED-MAC mechanism. SEED-MAC always produces and verifies MACs that are eight bytes in length. It does not have a parameter.

Constraints on key types and the length of data are summarized in the following table.

Table 1: SEED-MAC: Key and Data Length
Function Key Type Data Length Signature Length
C_Sign CKK_SEED any ½ block size (8 bytes)
C_Verify CKK_SEED any ½ block size (8 bytes)

Return to SafeNet ProtectToolkit-C Mechanisms