Cryptographic Token Interface Standard

PKCS#11


DES and Triple length DES in OFB Mode

 
Functions
           
Mechanism
Encrypt
&
Decrypt
Sign
&
Verify
SR
&
VR1
Digest
Gen.
Key/
Key
Pair
Wrap
&
Unwrap
Derive
CKM_DES_OFB64
X
           
CKM_DES_ OFB8
X
           
CKM_DES_ CFB64
X
           
CKM_DES_ CFB8
X
           

Cipher DES has a output feedback mode, DES-OFB, denoted CKM_DES_OFB8 and CKM_DES_OFB64. It is a mechanism for single and multiple-part encryption and decryption with DES.

It has a parameter, an initialization vector for this mode. The initialization vector has the same length as the blocksize.

Constraints on key types and the length of data are summarized in the following table:

Table 251, OFB: Key And Data Length
Function Key type
Input length
Output length
Comments
C_Encrypt CKK_DES, CKK_DES2, CKK_DES3
any
same as input length
no final part
C_Decrypt CKK_DES, CKK_DES2, CKK_DES3
any
same as input length
no final part

For this mechanism the CK_MECHANISM_INFO structure is as specified for CBC mode.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v230