CKM_RSA_PKCS
This section provides a summary of CKM_RSA_PKCS.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | Yes (Single-part operation only) |
| Sign and Verify | Yes (Single-part operation only) |
| SignRecover and VerifyRecover | Yes |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | Yes |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| Yes | Minimum 2048-bit modulus for signing. No wrapping or unwrapping operations when using firmware 7.03.00 or 7.03.01. When using 7.03.02 or newer, verification is not available. |
Key size range (bits) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 512 |
| FIPS Minimum | 2048 |
| Maximum | 4096 |
Parameter
None
Mechanism description
For a full description of this mechanism, refer to the PKCS#11 version 2.20 documentation from RSA Laboratories.
Return to ProtectToolkit-C mechanisms.
