Function Key Input length Output length Comments type C_Encrypt AES block same as input length no final part Any, ≥ size (16 bytes) C_Decrypt AES any, block same as input length no final part ≥ size (16 bytes) Additional AES Mechanisms Table 60, Additional AES Mechanisms vs. Functions Functions Encrypt Sign SR Gen. Wrap Mechanism & & & Digest & Derive Key/ Decrypt Verify VR1 Unwrap Key Pair CKM_AES_GCM CKM_AES_CCM CKM_AES_GMAC Definitions Mechanisms: CKM_AES_GCM CKM_AES_CCM CKM_AES_GMAC Generator Functions: CKG_NO_GENERATE CKG_GENERATE CKG_GENERATE_COUNTER CKG_GENERATE_RANDOM AES-GCM Authenticated Encryption / Decryption
Function Key type Input length Output length Comments C_Encrypt AES Any, ≥ block size (16 bytes) same as input length no final part C_Decrypt AES any, ≥ block size (16 bytes) same as input length no final part Additional AES Mechanisms Table 60, Additional AES Mechanisms vs. Functions Functions Mechanism Encrypt & Decrypt Sign & Verify SR & VR1 Digest Gen. Key/ Key Pair Wrap & Unwrap Derive CKM_AES_GCM CKM_AES_CCM CKM_AES_GMAC Definitions Mechanisms: CKM_AES_GCM CKM_AES_CCM CKM_AES_GMAC Generator Functions: CKG_NO_GENERATE CKG_GENERATE CKG_GENERATE_COUNTER CKG_GENERATE_RANDOM AES-GCM Authenticated Encryption / Decryption
pkcs11-curr-v3.0-wd06.docx