Cryptographic Token Interface Standard

PKCS#11


DES and Triple length DES in OFB Mode

Cipher DES has a output feedback mode, DES-OFB, denoted CKM_DES_OFB8 and CKM_DES_OFB64. It is a mechanism for single and multiple-part encryption and decryption with DES.

It has a parameter, an initialization vector for this mode. The initialization vector has the same length as the blocksize.

Constraints on key types and the length of data are summarized in the following table:

Table 105, OFB: Key And Data Length
Function Key type
Input length
Output length
Comments
C_Encrypt CKK_DES, CKK_DES2, CKK_DES3
any
same as input length
no final part
C_Decrypt CKK_DES, CKK_DES2, CKK_DES3
any
same as input length
no final part

For this mechanism the CK_MECHANISM_INFO structure is as specified for CBC mode.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v220