Cryptographic Token Interface Standard

PKCS#11


DES and Triple length DES in CFB Mode

Cipher DES has a cipher feedback mode, DES-CFB, denoted CKM_DES_CFB8 and CKM_DES_CFB64. It is a mechanism for single and multiple-part encryption and decryption with DES.

It has a parameter, an initialization vector for this mode. The initialization vector has the same length as the blocksize.

Constraints on key types and the length of data are summarized in the following table:

Table 106, CFB: Key And Data Length
Function Key type
Input length
Output length
Comments
C_Encrypt CKK_DES, CKK_DES2, CKK_DES3
any
same as input length
no final part
C_Decrypt CKK_DES, CKK_DES2, CKK_DES3
any
same as input length
no final part

For this mechanism the CK_MECHANISM_INFO structure is as specified for CBC mode.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v220