Cryptographic Token Interface Standard

PKCS#11

General-length RIPE-MD 128-HMAC

The general-length RIPE-MD 128-HMAC mechanism, denoted CKM_RIPEMD128_HMAC_GENERAL, is a mechanism for signatures and verification. It uses the HMAC construction, based on the RIPE-MD 128 hash function. The keys it uses are generic secret keys.

It has a parameter, a CK_MAC_GENERAL_PARAMS, which holds the length in bytes of the desired output. This length should be in the range 0-16 (the output size of RIPE-MD 128 is 16 bytes). Signatures (MACs) produced by this mechanism will be taken from the start of the full 16-byte HMAC output. 




 Table 140, General-length RIPE-MD 128-HMAC:   
Function  

Key type 

 

Data length 

 

Signature length 

   


C_Sign 

generic secret

 

any

 

0-16, depending on parameters

   


C_Verify 

generic secret

 

any

 

0-16, depending on parameters

  

 



 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v220