A P P E N D I X  G

Supported PKCS#11 Mechanisms

This appendix lists the PKCS#11 mechanisms supported by the Sun Crypto Accelerator 6000 Board.

TABLE G-1 lists the mechanisms supported by the board.

 


TABLE G-1 Supported PKCS#11 Mechanisms

Mechanisms

Key Range

Note

CKM_DES_CBC

8 bytes

 

CKM_DES3_CBC

16 or 24 bytes

 

CKM_AES_CBC

16, 24, or 32 bytes

 

CKM_AES_CTR

16, 24, or 32 bytes

Available for kernel applications only

CKM_RSA_X_509

256-2048 bits

 

CKM_RSA_PKCS

256-2048 bits

 

CKM_DSA

512-1024 bits

 

CKM_DES_CBC_PAD

8 bytes

Wrap/Unwrap Only

CKM_DES3_CBC_PAD

16 or 24 bytes

Wrap/Unwrap Only

CKM_RC2_CBC_PAD

1-128 bytes

Wrap/Unwrap Only

CKM_AES_CBC_PAD

16, 24, or 32 bytes

Wrap/Unwrap Only

CKM_DES_KEY_GEN

8 bytes

 

CKM_DES2_KEY_GEN

16 bytes

 

CKM_DES3_KEY_GEN

24 bytes

 

CKM_AES_KEY_GEN

16, 24, or 32 bytes

 

CKM_RSA_PKCS_KEY_PAIR_GEN

256-2048 bits

 

CKM_DSA_KEY_PAIR_GEN

512-1024 bits

 

CKM_DH_PKCS_KEY_PAIR_GEN

64-2048 bits

 

CKM_DH_PKCS_KEY_DERIVE

64-2048 bits

 

CKM_SHA_1

N/A

Available for kernel applications only

CKM_MD5

N/A

Available for kernel applications only