Cryptographic Token Interface Standard

PKCS#11

SHA-1 MACing in SSL 3.0

SHA-1 MACing in SSL3.0, denoted CKM_SSL3_SHA1_MAC, is a mechanism for single- and multiple-part signatures (data authentication) and verification using SHA-1, based on the SSL 3.0 protocol. This technique is very similar to the HMAC technique.

It has a parameter, a CK_MAC_GENERAL_PARAMS, which specifies the length in bytes of the signatures produced by this mechanism.

Constraints on key types and the length of input and output data are summarized in the following table: 




 Table 128, SHA-1 MACing in SSL 3.0: Key And Data Length   
Function Key type 

Data length

 

Signature length

   


C_Sign 

generic secret

 

any

 

4-8, depending on parameters

   


C_Verify 

generic secret

 

any

 

4-8, depending on parameters

  

 



For this mechanism, the ulMinKeySize and ulMaxKeySize  fields of the CK_MECHANISM_INFO structure specify the supported range of generic secret key sizes, in bits.


 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v211