Cryptographic Token Interface Standard

PKCS#11

General-length ARIA-MAC

General-length ARIA -MAC, denoted CKM_ARIA_MAC_GENERAL, is a mechanism for single- and multiple-part signatures and verification, based on ARIA and data authentication as defined in [FIPS 113].

It has a parameter, a CK_MAC_GENERAL_PARAMS structure, which specifies the output length desired from the mechanism.

The output bytes from this mechanism are taken from the start of the final ARIA cipher block produced in the MACing process.

Constraints on key types and the length of data are summarized in the following table: 




 Table 281, General-length ARIA-MAC: Key And Data Length   
Function Key type 

Data length

 

Signature length

   


C_Sign CKK_ARIA 

any

 

0-block size, as specified in parameters

   


C_Verify CKK_ARIA 

any

 

0-block size, as specified in parameters

  

 



For this mechanism, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure specify the supported range of ARIA key sizes, in bytes.


 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v230