CKM_SEED_MAC_GENERAL
This section provides a summary of CKM_SEED_MAC_GENERAL.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | No |
| Sign and Verify | Yes |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | No |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| No | Not applicable |
Key size range (bytes) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 16 |
| Maximum | 16 |
Parameter
CK_MAC_GENERAL_PARAMS
Mechanism description
General-length SEED-MAC, denoted CKM_SEED_MAC_GENERAL, is a mechanism for single and multiple part signatures and verification, based on the KISA (Korean Information Security Agency) SEED specification.
It has a single parameter, a CK_MAC_GENERAL_PARAMS structure, which specifies the output length desired from the mechanism.
The output bytes from this mechanism are taken from the start of the final SEED cipher block produced in the MACing process.
Constraints on key types and the length of data are summarized in the following table.
General-length SEED-MAC: Key and Data Length
| Function | Key type | Data length | Signature length |
|---|---|---|---|
| C_Sign | CKK_SEED | Any | 0-block size, as specified in parameters |
| C_Verify | CKK_SEED | Any | 0-block size, as specified in parameters |
Return to ProtectToolkit-C mechanisms.
