CKM_EC_MONTGOMERY_KEY_PAIR_GEN
This section provides a summary of CKM_EC_MONTGOMERY_KEY_PAIR_GEN.
Note
This mechanism is only available if you are using PTK 7.2.0 or newer with ProtectServer 3 HSM Firmware 7.02.00 or newer.
Supported Operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | No |
| Sign and Verify | No |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | Yes |
| Wrap and Unwrap | No |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| Yes | None |
Key Size Range (bits) and Parameters
| Key Size Minimum/Maximum | Value |
|---|---|
| Minimum | 64 |
| FIPS Minimum | 224 |
| Maximum | 571 |
Parameter
None
Mechanism Description
The elliptic curve key pair generation mechanism, denoted CKM_EC_MONTGOMERY_KEY_PAIR_GEN, is a key pair generation mechanism for EC Operation.
This mechanism operates identically to CKM_EC_KEY_PAIR_GEN, with the following differences:
-
It only accepts named Montgomery curves, such as curve25519 and curve448.
-
It generates a
CKK_EC_MONTGOMERYkey type.
For information about the operation of CKM_EC_KEY_PAIR_GEN, see CKM_EC_KEY_PAIR_GEN.
Return to ProtectToolkit-C mechanisms.
