Cryptoki: a cryptographic Token Interface
Download 360.55 Kb.
|
pkcs11-base-v2.40-cos01
- Navigate this page:
- 11.34. SSL mechanism parameters
11.33. LYNKS mechanisms11.33.1. LYNKS key wrappingThe LYNKS key wrapping mechanism, denoted CKM_WRAP_LYNKS, is a mechanism for wrapping and unwrapping secret keys with DES keys. It can wrap any 8-byte secret key, and it produces a 10-byte wrapped key, containing a cryptographic checksum. It does not have a parameter. To wrap a 8-byte secret key K with a DES key W, this mechanism performs the following steps: Initialize two 16-bit integers, sum1 and sum2, to 0. Loop through the bytes of K from first to last. Set sum1= sum1+the key byte (treat the key byte as a number in the range 0-255). Set sum2= sum2+ sum1. Encrypt K with W in ECB mode, obtaining an encrypted key, E. Concatenate the last 6 bytes of E with sum2, representing sum2 most-significant bit first. The result is an 8-byte block, T. Encrypt T with W in ECB mode, obtaining an encrypted checksum, C. Concatenate E with the last 2 bytes of C to obtain the wrapped key. When unwrapping a key with this mechanism, if the cryptographic checksum does not check out properly, an error is returned. In addition, if a DES key or CDMF key is unwrapped with this mechanism, the parity bits on the wrapped key must be set appropriately. If they are not set properly, an error is returned. 11.34. SSL mechanism parametersCK_SSL3_RANDOM_DATACK_SSL3_RANDOM_DATA is a structure which provides information about the random data of a client and a server in an SSL context. This structure is used by both the CKM_SSL3_MASTER_KEY_DERIVE and the CKM_SSL3_KEY_AND_MAC_DERIVE mechanisms. It is defined as follows: typedef struct CK_SSL3_RANDOM_DATA { CK_BYTE_PTR pClientRandom; CK_ULONG ulClientRandomLen; CK_BYTE_PTR pServerRandom; CK_ULONG ulServerRandomLen; } CK_SSL3_RANDOM_DATA; The fields of the structure have the following meanings: pClientRandom pointer to the client’s random data ulClientRandomLen length in bytes of the client’s random data pServerRandom pointer to the server’s random data ulServerRandomLen length in bytes of the server’s random data Download 360.55 Kb. Share with your friends:
|