A P P E N D I X  G

Feedback Supported PKCS#11 Mechanisms

This appendix lists the PKCS#11 mechanisms supported by the Sun Crypto Accelerator 6000 Board.

TABLE G-1 lists the mechanisms supported by the board.


TABLE G-1 Supported PKCS#11 Mechanisms

Mechanism Name

Key Range

Note

CKM_SHA_1

N/A

Multi-Part is implemented in firmware. Disabled by default.

CKM_SHA512

N/A

Implemented in firmware. Disabled by default

CKM_MD5

N/A

Multi-Part is implemented in firmware. Disabled by default.

CKM_DES_CBC

8 bytes

 

CKM_DES3_CBC

16 or 24 bytes

 

CKM_AES_CBC

16, 24, or 32 bytes

 

CKM_AES_CTR

16, 24, or 32 bytes

Available for kernel application only. Not available for Linux.

CKM_DES_CBC_PAD

8 bytes

 

CKM_DES3_CBC_PAD

16 or 24 bytes

 

CKM_AES_CBC_PAD

16, 24, or 32 byte

 

CKM_MD5_HMAC

1-61439 bytes

Multi-Part is implemented in firmware. Disabled by default.

CKM_SHA_1_HMAC

1-61439 bytes

Multi-Part is implemented in firmware. Disabled by default.

CKM_SHA512_HMAC

1-61439 bytes

Implemented in firmware. Disabled by default.

CKM_MD5_HMAC_GENERAL

1-61439 bytes

Multi-Part is implemented in firmware. Disabled by default.

CKM_SHA_1_HMAC_GENERAL

1-61439 bytes

Multi-Part is implemented in firmware. Disabled by default.

CKM_SHA512_HMAC_GENERAL

1-61439 bytes

Implemented in firmware. Disabled by default.

CKM_RSA_X_509

256-2048 bits

 

CKM_RSA_PKCS

256-2048 bits

 

CKM_DSA

512-1024 bits

 

CKM_DH_PKCS_KEY_PAIR_GEN

64-2048 bits

 

CKM_DH_PKCS_DERIVE

64-2048 bits

 

CKM_EC_KEY_PAIR_GEN

163-571 bits

 

CKM_ECDH1_DERIVE

163-571 bits

 

CKM_ECDSA

163-571 bits

 

CKM_RSA_PKCS_KEY_PAIR_GEN

256-2048 bits

 

CKM_DSA_KEY_PAIR_GEN

512-1024 bits

 

CKM_DES_KEY_GEN

8 bytes

 

CKM_DES2_KEY_GEN

16 bytes

 

CKM_DES3_KEY_GEN

24 bytes

 

CKM_AES_KEY_GEN

16, 24, or 32 bytes

 

CKM_RC2_CBC_PAD

8-1024 bits

Disabled by default.


 

Feedback