Cryptographic Token Interface Standard

PKCS#11

General-length general block cipher MAC

Cipher <NAME> has a general-length MACing mode, "General-length <NAME>-MAC", denoted CKM_<NAME>_MAC_GENERAL. It is a mechanism for single- and multiple-part signatures and verification, based on the <NAME> encryption algorithm and data authentication as defined in FIPS PUB 113.

It has a parameter, a CK_MAC_GENERAL_PARAMS, which specifies the size of the output.

The output bytes from this mechanism are taken from the start of the final cipher block produced in the MACing process.

Constraints on key types and the length of input and output data are summarized in the following table: 




 Table 329, General-length General Block Cipher MAC: Key And Data Length   
Function Key type 

Data length

 

Signature length

   


C_Sign <NAME> 

any

 

0-blocksize, depending on parameters

   


C_Verify <NAME> 

any

 

0-blocksize, depending on parameters

  

 



For this mechanism, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure may or may not be used. The CAST, CAST3, and CAST128 (CAST5) ciphers have variable key sizes, and so for these ciphers, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure specify the supported range of key sizes, in bytes. For the DES, DES3 (triple-DES), IDEA, and CDMF ciphers, these fields are not used.


 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v230