The U.S. government has standardized on the Digital Signature Algorithm as defined in FIPS PUB 186 for signatures and the Secure Hash Algorithm as defined in FIPS PUB 180-1 for message digesting. The relevant mechanisms include the following:
DSA key generation (512-1024 bits)
DSA (512-1024 bits)
SHA-1
Note that this version of Cryptoki does not have a mechanism for generating DSA parameters.
A.2 Cellular Digital Packet Data
Cellular Digital Packet Data (CDPD) is a set of protocols for wireless communication. The basic set of mechanisms to support CDPD applications includes the following:
Diffie-Hellman key generation (256-1024 bits)
Diffie-Hellman key derivation (256-1024 bits)
RC4 key generation (40-128 bits)
RC4 (40-128 bits)
(The initial CDPD security specification limits the size of the Diffie-Hellman key to 256 bits, but it has been recommended that the size be increased to at least 512 bits.)
Note that this version of Cryptoki does not have a mechanism for generating Diffie-Hellman parameters.
Appendix B: Comparison of Cryptoki and Other APIs
This appendix compares Cryptoki with the following cryptographic APIs:
ANSI N13-94 - Guideline X9.TG-12-199X, Using Tessera in Financial Systems: An Application Programming Interface, April 29, 1994
X/Open GCS-API - Generic Cryptographic Service API, Draft 2, February 14, 1995
B.1 FORTEZZA CIPG, Rev. 1.52
This document defines an API to the FORTEZZA PCMCIA Crypto Card. It is at a level similar to Cryptoki. The following table lists the FORTEZZA CIPG functions, together with the equivalent Cryptoki functions:
Table B-1, FORTEZZA CIPG vs. Cryptoki
This proposed standard defines an API to high-level security services such as authentication of identities and data-origin, non-repudiation, and separation and protection. It is at a higher level than Cryptoki. The following table lists the GCS-API functions with the Cryptoki functions used to implement the functions. Note that full support of GCS-API is left for future versions of Cryptoki.
Table B-2, GCS-API vs. Cryptoki
