CKM_SEED_MAC_GENERAL

Supported Operations

Encrypt and Decrypt No
Sign and Verify Yes
SignRecover and VerifyRecover No
Digest No
Generate Key/Key-Pair No
Wrap and Unwrap No
Derive No
Available in FIPS Mode No

Key Size Range (bytes) and Parameters

Minimum 16
Maximum 16
Parameter CK_MAC_GENERAL_PARAMS

Description

General-length SEED-MAC, denoted CKM_SEED_MAC_GENERAL, is a mechanism for single and multiple part signatures and verification, based on the KISA (Korean Information Security Agency) SEED specification.

It has a single parameter, a CK_MAC_GENERAL_PARAMS structure, which specifies the output length desired from the mechanism.

The output bytes from this mechanism are taken from the start of the final SEED cipher block produced in the MACing process.

Constraints on key types and the length of data are summarized in the following table.

Table 1: General-length SEED-MAC: Key and Data Length
Function Key Type Data Length Signature Length
C_Sign CKK_SEED Any 0-block size, as specified in parameters
C_Verify CKK_SEED Any 0-block size, as specified in parameters

Return to SafeNet ProtectToolkit-C Mechanisms