CKM_DES3_X919_MAC
This section provides a summary of CKM_DES3_X919_MAC.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | No |
| Sign and Verify | Yes |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | No |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| Yes | No MAC generation |
Key size range (bytes) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 16 |
| FIPS Minimum | 16 |
| Maximum | 24 |
Parameter
CK_MAC_GENERAL_PARAMS
Mechanism description
CKM_DES3_X919_MAC and CKM_DES3_X919_MAC_GENERAL are signature generation and verification mechanisms, as defined by ANSI X9.19. They are an extension of the single length key MAC mechanisms. The data is MAC’ed with the left most key value in the normal manner, but the final cipher block is then decrypted (ECB mode) with the middle key value and encrypted (ECB mode) with the Right most key part.
For double length keys, the Right key component is the same as the Left key component.
Return to ProtectToolkit-C mechanisms.
