Cryptographic Token Interface Standard

PKCS#11


RC2-MAC

RC2-MAC, denoted by CKM_RC2_MAC, is a special case of the general-length RC2-MAC mechanism (see Section 12.12.5). Instead of taking a CK_RC2_MAC_GENERAL_PARAMS parameter, it takes a CK_RC2_PARAMS parameter, which only contains the effective number of bits in the RC2 search space. RC2-MAC always produces and verifies 4-byte MACs.

Constraints on key types and the length of data are summarized in the following table:

Table 73, RC2-MAC: Key And Data Length
Function Key type
Data length
Signature length
C_Sign RC2
any
4
C_Verify RC2
any
4

For this mechanism, the ulMinKeySize and ulMaxKeySize fields of the CK_MECHANISM_INFO structure specify the supported range of RC2 effective number of bits.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v210