Cryptographic Token Interface Standard

PKCS#11


AES-OFB

AES-OFB, denoted CKM_AES_OFB. It is a mechanism for single and multiple-part encryption and decryption with AES. AES-OFB mode is described in [NIST sp800-38a].

It has a parameter, an initialization vector for this mode. The initialization vector has the same length as the blocksize.Constraints on key types and the length of data are summarized in the following table:

Table 240, AES-OFB: Key And Data Length
Function Key type
Input length
Output length
Comments
C_Encrypt AES
any
same as input length
no final part
C_Decrypt AES
any
same as input length
no final part

For this mechanism the CK_MECHANISM_INFO structure is as specified for CBC mode.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v230