Cryptographic Token Interface Standard

PKCS#11


CK_MECHANISM_INFO Reference

CK_MECHANISM_INFO; CK_MECHANISM_INFO_PTR

CK_MECHANISM_INFO is a structure that provides information about a particular mechanism. More...


Data Fields

CK_ULONG ulMinKeySize
 the minimum size of the key for the mechanism (whether this is measured in bits or in bytes is mechanism-dependent). More...

CK_ULONG ulMaxKeySize
 the maximum size of the key for the mechanism (whether this is measured in bits or in bytes is mechanism-dependent). More...

CK_FLAGS flags
 bit flags specifying mechanism capabilities. More...


Detailed Description

CK_MECHANISM_INFO; CK_MECHANISM_INFO_PTR

CK_MECHANISM_INFO is a structure that provides information about a particular mechanism.
ulMinKeySize the minimum size of the key for the mechanism (whether this is measured in bits or in bytes is mechanism-dependent)
ulMaxKeySize the maximum size of the key for the mechanism (whether this is measured in bits or in bytes is mechanism-dependent)
flags bit flags specifying mechanism capabilities

For some mechanisms, the ulMinKeySize and ulMaxKeySize fields have meaningless values.

The following table defines the flags field:

Table 12, Mechanism Information Flags
Bit Flag Mask Meaning
CKF_HW 0x00000001 TRUE if the mechanism is performed by the device; FALSE if the mechanism is performed in software
CKF_ENCRYPT 0x00000100 TRUE if the mechanism can be used with C_EncryptInit
CKF_DECRYPT 0x00000200 TRUE if the mechanism can be used with C_DecryptInit
CKF_DIGEST 0x00000400 TRUE if the mechanism can be used with C_DigestInit
CKF_SIGN 0x00000800 TRUE if the mechanism can be used with C_SignInit
CKF_SIGN_RECOVER 0x00001000 TRUE if the mechanism can be used with C_SignRecoverInit
CKF_VERIFY 0x00002000 TRUE if the mechanism can be used with C_VerifyInit
CKF_VERIFY_RECOVER 0x00004000 TRUE if the mechanism can be used with C_VerifyRecoverInit
CKF_GENERATE 0x00008000 TRUE if the mechanism can be used with C_GenerateKey
CKF_GENERATE_KEY_PAIR 0x00010000 TRUE if the mechanism can be used with C_GenerateKeyPair
CKF_WRAP 0x00020000 TRUE if the mechanism can be used with C_WrapKey
CKF_UNWRAP 0x00040000 TRUE if the mechanism can be used with C_UnwrapKey
CKF_DERIVE 0x00080000 TRUE if the mechanism can be used with C_DeriveKey
CKF_EXTENSION 0x80000000 TRUE if there is an extension to the flags; FALSE if no extensions. Must be FALSE for this version.

CK_MECHANISM_INFO_PTR is a pointer to a CK_MECHANISM_INFO.


Field Documentation

CK_ULONG ulMinKeySize
 

the minimum size of the key for the mechanism (whether this is measured in bits or in bytes is mechanism-dependent).

CK_ULONG ulMaxKeySize
 

the maximum size of the key for the mechanism (whether this is measured in bits or in bytes is mechanism-dependent).

CK_FLAGS flags
 

bit flags specifying mechanism capabilities.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v210