Cryptographic Token Interface Standard

PKCS#11

PKCS #1 RSA signature with MD2, MD5, or SHA-1

The PKCS #1 RSA signature with MD2 mechanism, denoted CKM_MD2_RSA_PKCS, performs single- and multiple-part digital signatures and verification operations without message recovery. The operations performed are as described in PKCS #1 with the object identifier md2WithRSAEncryption.

Similarly, the PKCS #1 RSA signature with MD5 mechanism, denoted CKM_MD5_RSA_PKCS, performs the same operations described in PKCS #1 with the object identifier md5WithRSAEncryption. The PKCS #1 RSA signature with SHA-1 mechanism, denoted CKM_SHA1_RSA_PKCS, performs the same operations, except that it uses the hash function SHA-1, instead of MD2 or MD5.

None of these mechanisms has a parameter.

Constraints on key types and the length of the data for these mechanisms are summarized in the following table. In the table, k is the length in bytes of the RSA modulus. For the PKCS #1 RSA signature with MD2 and PKCS #1 RSA signature with MD5 mechanisms, k must be at least 27; for the PKCS #1 RSA signature with SHA-1 mechanism, k must be at least 31. 




 Table 62, PKCS #1 RSA Signatures with MD2, MD5, or SHA-1: Key And Data Length   
Function Key type 

Input length

 

Output length

 

Comments

   


C_Sign RSA private key 

any

 

k 

 

block type 01

   


C_Verify RSA public key 

any, k 2

 

N/A

 

block type 01

  

 



2 Data length, signature length.


For these mechanisms, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure specify the supported range of RSA modulus sizes, in bits.


 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v210