pkcs11 — archive

New Mechanisms subgroup Part 3 or 4, new AES

From: Mark Powers
To: [email protected]
Date: Wed, 01 May 2013 00:47:00 -0000

On 04/30/13 03:59 PM, Michael StJohns wrote: On 4/30/2013 5:19 PM, Robert Relyea wrote: CKM_AES_XCBC_MAC_96 CKM_AES_XCBC_MAC_96 is a special case used with IPsec. 128-bit result truncated to 96 bits. Why wouldn't you just truncate the result after its returned from PKCS11? Because you might want to pass a pointer to a 96-bit field in a packet to PKCS11 without worrying that other fields will be clobbered. You could pass a 128-bit buffer and copy 96 bits into the packet, but that's not as elegant. Mike --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail. Follow this link to all your TCs in OASIS at: https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php