CKM_SEED_MAC
This section provides a summary of CKM_SEED_MAC.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | No |
| Sign and Verify | Yes |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | No |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| No | Not applicable |
Key size range (bytes) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 16 |
| Maximum | 16 |
Parameter
None
Mechanism description
SEED-MAC, denoted by CKM_SEED_MAC, is a special case of the general-length SEED-MAC mechanism. SEED-MAC always produces and verifies MACs that are eight bytes in length. It does not have a parameter.
Constraints on key types and the length of data are summarized in the following table.
SEED-MAC: Key and Data Length
|Function|Key type|Data length|Signature length| |-|-|-|-|-| |C_Sign|CKK_SEED|Any|½ block size (8 bytes)| |C_Verify|CKK_SEED|Any|½ block size (8 bytes)|
Return to ProtectToolkit-C mechanisms.
