CKM_SEED_KEY_GEN
This section provides a summary of CKM_SEED_KEY_GEN.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | Yes |
| Sign and Verify | No |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | Yes |
| Wrap and Unwrap | No |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| No | Not applicable |
Key size range (bytes) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 16 |
| Maximum | 16 |
Parameter
None
Mechanism description
The SEED key generation mechanism, denoted CKM_SEED_KEY_GEN, is a key generation mechanism for the Korean Information Security Agency’s SEED algorithm.
The mechanism does not have a parameter, and it generates SEED keys 16 bytes in length.
The mechanism contributes the CKA_CLASS, CKA_KEY_TYPE, CKA_VALUE_LEN, and CKA_VALUE attributes to the new key. Other attributes supported by the SEED key type (specifically, the flags indicating which functions the key supports) can be specified in the template for the key, or they can be assigned default initial values.
For this mechanism, the ulMinKeySize and ulMaxKeySize fields of the CK_MECHANISM_INFO structure specify the supported range of SEED key sizes, in bytes, which is 16.
The algorithm block size is 16 bytes.
Return to ProtectToolkit-C mechanisms.
