Cryptographic Token Interface Standard

PKCS#11


General-length MD5-HMAC

The general-length MD5-HMAC mechanism, denoted CKM_MD5_HMAC_GENERAL, is a mechanism for signatures and verification. It uses the HMAC construction, based on the MD5 hash function. The keys it uses are generic secret keys.

It has a parameter, a CK_MAC_GENERAL_PARAMS, which holds the length in bytes of the desired output. This length should be in the range 0-16 (the output size of MD5 is 16 bytes). Signatures (MACs) produced by this mechanism will be taken from the start of the full 16-byte HMAC output.

Table 104, General-length MD5-HMAC: Key And Data Length
Function Key type
Data length
Signature length
C_Sign
generic secret
any
0-16, depending on parameters
C_Verify
generic secret
any
0-16, depending on parameters


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v210