Cryptographic Token Interface Standard

PKCS#11

---

PKCS #5 and PKCS #5-style password-based encryption (PBE)

Sections

Password-based encryption/authentication mechanism parameters

MD2-PBE for DES-CBC

MD5-PBE for DES-CBC

MD5-PBE for CAST-CBC

MD5-PBE for CAST3-CBC

MD5-PBE for CAST128-CBC (CAST5-CBC)

SHA-1-PBE for CAST128-CBC (CAST5-CBC)

PKCS #5 PBKDF2 key generation mechanism parameters

PKCS #5 PBKD2 key generation

---

Detailed Description

The mechanisms in this section are for generating keys and IVs for performing password-based encryption. The method used to generate keys and IVs is specified in PKCS #5.

Mechanisms:

CKM_PBE_MD2_DES_CBC 
CKM_PBE_MD5_DES_CBC 
CKM_PBE_MD5_CAST_CBC 
CKM_PBE_MD5_CAST3_CBC 
CKM_PBE_MD5_CAST5_CBC 
CKM_PBE_MD5_CAST128_CBC 
CKM_PBE_SHA1_CAST5_CBC 
CKM_PBE_SHA1_CAST128_CBC 
CKM_PBE_SHA1_RC4_128 
CKM_PBE_SHA1_RC4_40 
CKM_PBE_SHA1_DES3_EDE_CBC 
CKM_PBE_SHA1_DES2_EDE_CBC 
CKM_PBE_SHA1_RC2_128_CBC 
CKM_PBE_SHA1_RC2_40_CBC 
CKM_PKCS5_PBKD2 
CKM_PBA_SHA1_WITH_SHA1_HMAC 

---

RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v220