Cryptographic Token Interface Standard

PKCS#11

ANSI X9.31 RSA signature with SHA-1

The ANSI X9.31 RSA signature with SHA-1 mechanism, denoted CKM_SHA1_RSA_X9_31, performs single- and multiple-part digital signatures and verification operations without message recovery. The operations performed are as described in ANSI X9.31.

This mechanism does not have a parameter.

Constraints on key types and the length of the data for these mechanisms are summarized in the following table. In the table, k is the length in bytes of the RSA modulus. For all operations, the k value must be at least 128 and a multiple of 32 as specified in ANSI X9.31. 




 Table 47, ANSI X9.31 RSA Signatures with SHA-1: Key And Data Length   
Function Key type 

Input length

 

Output length

   


C_Sign RSA private key 

any

 

k 

   


C_Verify RSA public key 

any, k 2

 

N/A

  

 



2 Data length, signature length.


For these mechanisms, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure specify the supported range of RSA modulus sizes, in bits.


 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v220