Cryptographic Token Interface Standard

PKCS#11

General-length RC2-MAC

General-length RC2-MAC, denoted CKM_RC2_MAC_GENERAL, is a mechanism for single- and multiple-part signatures and verification, based on RSA Data Security's block cipher RC2 and data authentication as defined in FIPS PUB 113.

It has a parameter, a CK_RC2_MAC_GENERAL_PARAMS structure, which specifies the effective number of bits in the RC2 search space and the output length desired from the mechanism.

The output bytes from this mechanism are taken from the start of the final RC2 cipher block produced in the MACing process.

Constraints on key types and the length of data are summarized in the following table: 




 Table 84, General-length RC2-MAC: Key And Data Length   
Function Key type 

Data length

 

Signature length

   


C_Sign RC2 

any

 

0-8, as specified in parameters

   


C_Verify RC2 

any

 

0-8, as specified in parameters

  

 



For this mechanism, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure specify the supported range of RC2 effective number of bits.


 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v211