Cryptographic Token Interface Standard

PKCS#11


Definitions

For the purposes of this standard, the following definitions apply:
APIApplication programming interface.
ApplicationAny computer program that calls the Cryptoki interface.
ASN.1Abstract Syntax Notation One, as defined in X.208.
AttributeA characteristic of an object.
BATONMISSI's BATON block cipher.
BERBasic Encoding Rules, as defined in X.209.
CASTNortel's proprietary symmetric block cipher.
CAST3Nortel's proprietary symmetric block cipher.
CAST5Nortel's proprietary symmetric block cipher.
CBCCipher Block Chaining mode, as defined in FIPS PUB 81.
CDMFCommercial Data Masking Facility, a block encipherment method specified by International Business Machines Corporation and based on DES.
CertificateA signed message binding a subject name and a public key.
Cryptographic DeviceA device storing cryptographic information and possibly performing cryptographic functions. May be implemented as a smart card, smart disk, PCMCIA card, or with some other technology, such as software only, as a process on a server.
CryptokiThe Cryptographic Token Interface defined in this standard.
Cryptoki libraryA library that implements the functions specified in this standard.
DESData Encryption Standard, as defined in FIPS PUB 46-2.
DSADigital Signature Algorithm, as defined in FIPS PUB 186.
ECBElectronic Codebook mode, as defined in FIPS PUB 81.
ECDSAElliptic Curve DSA, as in IEEE P1363.
FASTHASHMISSI's FASTHASH message-digesting algorithm.
IDEAAscom Systec's symmetric block cipher.
JUNIPERMISSI's JUNIPER block cipher.
KEAMISSI's Key Exchange Algorithm.
LYNKSA smart card manufactured by SPYRUS.
MACMessage Authentication Code, as defined in ANSI X9.9.
MAYFLYMISSI's MAYFLY key agreement algorithm.
MD2RSA Data Security, Inc.'s MD2 message-digest algorithm, as defined in RFC 1319.
MD5RSA Data Security, Inc.'s MD5 message-digest algorithm, as defined in RFC 1321.
MechanismA process for implementing a cryptographic operation.
OAEPOptimal Asymmetric Encryption Padding for RSA.
ObjectAn item that is stored on a token; may be data, a certificate, or a key.
PINPersonal Identification Number.
RSAThe RSA public-key cryptosystem, as defined in PKCS #1.
RC2RSA Data Security's proprietary RC2 symmetric block cipher.
RC4RSA Data Security's proprietary RC4 symmetric stream cipher.
RC5RSA Data Security's RC5 symmetric block cipher.
ReaderThe means by which information is exchanged with a device.
SessionA logical connection between an application and a token.
SETThe Secure Electronic Transaction protocol.
SHA-1The (revised) Secure Hash Algorithm, as defined in FIPS PUB 180, as amended by NIST.
SlotA logical reader that potentially contains a token.
SKIPJACKMISSI's SKIPJACK block cipher.
SSLThe Secure Sockets Layer 3.0 protocol.
Subject NameThe X.500 distinguished name of the entity to which a key is assigned.
SOA Security Officer user.
TokenThe logical view of a cryptographic device defined by Cryptoki.
UserThe person using an application that interfaces to Cryptoki.

RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v200