Table 82, General-length SHA-224-HMAC: Key And Data Length Function Key type Data length Signature length C_Sign generic secret Any 1-28, depending on parameters C_Verify generic secret Any 1-28, depending on parameters SHA-224-HMAC The SHA-224-HMAC mechanism, denoted is a special case of the general-length CKM_SHA224_HMAC, SHA-224-HMAC mechanism. It has no parameter, and always produces an output of length 28. SHA-224 key derivation SHA-224 key derivation, denoted CKM_SHA224_KEY_DERIVATION, is the same as the SHA-1 key derivation mechanism in Section 12.21.5 except that it uses the SHA-224 hash function and the relevant length is 28 bytes. SHA-224 HMAC key generation The SHA-224-HMAC key generation mechanism, denoted CKM_SHA224_KEY_GEN, is a key generation mechanism for SHA224-HMAC. NIST’s It does not have a parameter. The mechanism generates SHA224-HMAC keys with a particular length in bytes, as specified in the CKA_VALUE_LEN attribute of the template for the key. The mechanism contributes the CKA_CLASS, CKA_KEY_TYPE, and CKA_VALUE attributes to the new key. Other attributes supported by the SHA224-HMAC key type (specifically, the flags indicating which functions the key supports) may be specified in the template for the key, or else are assigned default initial values. For this mechanism, the ulMinKeySize and ulMaxKeySize fields of the CK_MECHANISM_INFO structure specify the supported range of CKM_SHA224_HMAC key sizes, in bytes. SHA-256 Table 83, SHA-256 Mechanisms vs. Functions Functions Encrypt Sign SR Gen. Wrap Mechanism & & & Digest & Derive Key/ Decrypt Verify VR1 Unwrap Key Pair CKM_SHA256 CKM_SHA256_HMAC_GENERAL CKM_SHA256_HMAC CKM_SHA256_KEY_DERIVATION CKM_SHA256_KEY_GEN
Table 82, General-length SHA-224-HMAC: Key And Data Length Function Key type Data length Signature length C_Sign generic secret Any 1-28, depending on parameters C_Verify generic secret Any 1-28, depending on parameters SHA-224-HMAC The SHA-224-HMAC mechanism, denoted CKM_SHA224_HMAC, is a special case of the general-length SHA-224-HMAC mechanism. It has no parameter, and always produces an output of length 28. SHA-224 key derivation SHA-224 key derivation, denoted CKM_SHA224_KEY_DERIVATION, is the same as the SHA-1 key derivation mechanism in Section 12.21.5 except that it uses the SHA-224 hash function and the relevant length is 28 bytes. SHA-224 HMAC key generation The SHA-224-HMAC key generation mechanism, denoted CKM_SHA224_KEY_GEN, is a key generation mechanism for NIST’s SHA224-HMAC. It does not have a parameter. The mechanism generates SHA224-HMAC keys with a particular length in bytes, as specified in the CKA_VALUE_LEN attribute of the template for the key. The mechanism contributes the CKA_CLASS, CKA_KEY_TYPE, and CKA_VALUE attributes to the new key. Other attributes supported by the SHA224-HMAC key type (specifically, the flags indicating which functions the key supports) may be specified in the template for the key, or else are assigned default initial values. For this mechanism, the ulMinKeySize and ulMaxKeySize fields of the CK_MECHANISM_INFO structure specify the supported range of CKM_SHA224_HMAC key sizes, in bytes. SHA-256 Table 83, SHA-256 Mechanisms vs. Functions Functions Mechanism Encrypt & Decrypt Sign & Verify SR & VR1 Digest Gen. Key/ Key Pair Wrap & Unwrap Derive CKM_SHA256 CKM_SHA256_HMAC_GENERAL CKM_SHA256_HMAC CKM_SHA256_KEY_DERIVATION CKM_SHA256_KEY_GEN
pkcs11-curr-v3.0-wd05.docx