Cryptographic Token Interface Standard

PKCS#11


JUNIPER-CBC128

JUNIPER-CBC128, denoted CKM_JUNIPER_CBC128, is a mechanism for single- and multiple-part encryption and decryption with JUNIPER in 128-bit cipher-block chaining mode.

It has a parameter, a 24-byte initialization vector. During an encryption operation, this IV is set to some value generated by the token"in other words, the application cannot specify a particular IV when encrypting. It can, of course, specify a particular IV when decrypting.

Constraints on key types and the length of data are summarized in the following table. For encryption and decryption, the input and output data (parts) may begin at the same location in memory.

Table 123, JUNIPER-CBC128: Data and Length
Function Key type
Input length
Output length
Comments
C_Encrypt JUNIPER
multiple of 16
same as input length
no final part
C_Decrypt JUNIPER
multiple of 16
same as input length
no final part


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v220