Cipher has a general-length MACing mode, “General-length -MAC”, denoted CKM__MAC_GENERAL. It is a mechanism for single- and multiple-part signatures and verification.
It has a parameter, a CK_MAC_GENERAL_PARAMS, which specifies the size of the output.
The output bytes from this mechanism are taken from the start of the final cipher block produced in the MACing process.
Constraints on key types and the length of input and output data are summarized in the following table:
Table 72, General-length General Block Cipher MAC: Key And Data Length
Cipher has a MACing mechanism, “-MAC”, denoted CKM__MAC. This mechanism is a special case of the CKM__MAC_GENERAL mechanism described in Section . It always produces an output of size half as large as ’s blocksize.
This mechanism has no parameters.
Constraints on key types and the length of data are summarized in the following table:
Table 73, General Block Cipher MAC: Key And Data Length
