CKM_DES3_CBC
This section provides a summary of CKM_DES3_CBC.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | Yes |
| Sign and Verify | No |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | Yes |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| Yes | When using firmware older than 7.03.00 Encrypt: A maximum limit of 228 64-bit packets can be processed by a single key. Once this limit is reached, an error (CKR_KEY_NOT_ACTIVE) occurs. No wrapping When using 7.03.00 or newer No encryption No wrapping |
Key size range (bytes) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 16 |
| FIPS Minimum | 16 |
| Maximum | 24 |
Parameter
8 bytes
Mechanism description
For a full description of this mechanism, refer to the PKCS#11 version 2.20 documentation from RSA Laboratories.
Return to ProtectToolkit-C mechanisms.
