PKCS#11 mechanisms by value
A mechanism number in a log is only half a fact. The other half is whether
the library in front of you exposes it, for which key sizes, and for which
operations, and that half lives in C_GetMechanismInfo where most status
tools never look. The columns on the right are what the probe read off each
library, on the date and build named on its page. A dash means the library
did not list it, which on a hardware token can be policy rather than
capability.
Named by the specification
| Mechanism | Hex | SoftHSMv2 | Thales ProtectServer |
|---|---|---|---|
CKM_RSA_PKCS_KEY_PAIR_GEN | 0x00000000 | 512–16384 generate_key_pair | 512–4096 hardware, generate_key_pair |
CKM_RSA_PKCS | 0x00000001 | 512–16384 encrypt, decrypt, sign, verify, wrap, unwrap | 512–4096 hardware, encrypt, decrypt, sign, sign_recover, verify, verify_recover, wrap, unwrap |
CKM_RSA_9796 | 0x00000002 | - | 512–4096 hardware, sign, sign_recover, verify, verify_recover |
CKM_RSA_X_509 | 0x00000003 | 512–16384 encrypt, decrypt, sign, verify | 512–4096 hardware, encrypt, decrypt, sign, sign_recover, verify, verify_recover, wrap, unwrap |
CKM_MD2_RSA_PKCS | 0x00000004 | - | 512–4096 hardware, sign, verify |
CKM_MD5_RSA_PKCS | 0x00000005 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA1_RSA_PKCS | 0x00000006 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_RIPEMD128_RSA_PKCS | 0x00000007 | - | 512–4096 hardware, sign, verify |
CKM_RIPEMD160_RSA_PKCS | 0x00000008 | - | 512–4096 hardware, sign, verify |
CKM_RSA_PKCS_OAEP | 0x00000009 | 512–16384 encrypt, decrypt, wrap, unwrap | 512–4096 hardware, encrypt, decrypt, wrap, unwrap |
CKM_RSA_X9_31_KEY_PAIR_GEN | 0x0000000A | - | 1024–4096 hardware, generate_key_pair |
CKM_RSA_X9_31 | 0x0000000B | - | - |
CKM_SHA1_RSA_X9_31 | 0x0000000C | - | - |
CKM_RSA_PKCS_PSS | 0x0000000D | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA1_RSA_PKCS_PSS | 0x0000000E | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_ML_KEM_KEY_PAIR_GEN new in 3.2 | 0x0000000F | - | - |
CKM_DSA_KEY_PAIR_GEN | 0x00000010 | 512–1024 generate_key_pair | 512–3072 hardware, generate_key_pair |
CKM_DSA | 0x00000011 | 512–1024 sign, verify | 512–3072 hardware, sign, verify |
CKM_DSA_SHA1 | 0x00000012 | 512–1024 sign, verify | 512–3072 hardware, sign, verify |
CKM_DSA_SHA224 | 0x00000013 | 512–1024 sign, verify | 1024–3072 hardware, sign, verify |
CKM_DSA_SHA256 | 0x00000014 | 512–1024 sign, verify | 1024–3072 hardware, sign, verify |
CKM_DSA_SHA384 | 0x00000015 | 512–1024 sign, verify | 1024–3072 hardware, sign, verify |
CKM_DSA_SHA512 | 0x00000016 | 512–1024 sign, verify | 1024–3072 hardware, sign, verify |
CKM_ML_KEM new in 3.2 | 0x00000017 | - | - |
CKM_DSA_SHA3_224 | 0x00000018 | 512–1024 sign, verify | - |
CKM_DSA_SHA3_256 | 0x00000019 | 512–1024 sign, verify | - |
CKM_DSA_SHA3_384 | 0x0000001A | 512–1024 sign, verify | - |
CKM_DSA_SHA3_512 | 0x0000001B | 512–1024 sign, verify | - |
CKM_ML_DSA_KEY_PAIR_GEN new in 3.2 | 0x0000001C | - | - |
CKM_ML_DSA new in 3.2 | 0x0000001D | - | - |
CKM_HASH_ML_DSA new in 3.2 | 0x0000001F | - | - |
CKM_DH_PKCS_KEY_PAIR_GEN | 0x00000020 | 512–10000 generate_key_pair | 512–4096 hardware, generate_key_pair |
CKM_DH_PKCS_DERIVE | 0x00000021 | 512–10000 derive | 512–4096 hardware, derive |
CKM_HASH_ML_DSA_SHA224 new in 3.2 | 0x00000023 | - | - |
CKM_HASH_ML_DSA_SHA256 new in 3.2 | 0x00000024 | - | - |
CKM_HASH_ML_DSA_SHA384 new in 3.2 | 0x00000025 | - | - |
CKM_HASH_ML_DSA_SHA512 new in 3.2 | 0x00000026 | - | - |
CKM_HASH_ML_DSA_SHA3_224 new in 3.2 | 0x00000027 | - | - |
CKM_HASH_ML_DSA_SHA3_256 new in 3.2 | 0x00000028 | - | - |
CKM_HASH_ML_DSA_SHA3_384 new in 3.2 | 0x00000029 | - | - |
CKM_HASH_ML_DSA_SHA3_512 new in 3.2 | 0x0000002A | - | - |
CKM_HASH_ML_DSA_SHAKE128 new in 3.2 | 0x0000002B | - | - |
CKM_HASH_ML_DSA_SHAKE256 new in 3.2 | 0x0000002C | - | - |
CKM_SLH_DSA_KEY_PAIR_GEN new in 3.2 | 0x0000002D | - | - |
CKM_SLH_DSA new in 3.2 | 0x0000002E | - | - |
CKM_X9_42_DH_KEY_PAIR_GEN | 0x00000030 | - | 1024–4096 hardware, generate_key_pair |
CKM_X9_42_DH_DERIVE | 0x00000031 | - | 1024–4096 hardware, derive |
CKM_X9_42_DH_HYBRID_DERIVE | 0x00000032 | - | - |
CKM_X9_42_MQV_DERIVE | 0x00000033 | - | - |
CKM_HASH_SLH_DSA new in 3.2 | 0x00000034 | - | - |
CKM_HASH_SLH_DSA_SHA224 new in 3.2 | 0x00000036 | - | - |
CKM_HASH_SLH_DSA_SHA256 new in 3.2 | 0x00000037 | - | - |
CKM_HASH_SLH_DSA_SHA384 new in 3.2 | 0x00000038 | - | - |
CKM_HASH_SLH_DSA_SHA512 new in 3.2 | 0x00000039 | - | - |
CKM_HASH_SLH_DSA_SHA3_224 new in 3.2 | 0x0000003A | - | - |
CKM_HASH_SLH_DSA_SHA3_256 new in 3.2 | 0x0000003B | - | - |
CKM_HASH_SLH_DSA_SHA3_384 new in 3.2 | 0x0000003C | - | - |
CKM_HASH_SLH_DSA_SHA3_512 new in 3.2 | 0x0000003D | - | - |
CKM_HASH_SLH_DSA_SHAKE128 new in 3.2 | 0x0000003E | - | - |
CKM_HASH_SLH_DSA_SHAKE256 new in 3.2 | 0x0000003F | - | - |
CKM_SHA256_RSA_PKCS | 0x00000040 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA384_RSA_PKCS | 0x00000041 | 512–16384 sign, verify | 640–4096 hardware, sign, verify |
CKM_SHA512_RSA_PKCS | 0x00000042 | 512–16384 sign, verify | 768–4096 hardware, sign, verify |
CKM_SHA256_RSA_PKCS_PSS | 0x00000043 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA384_RSA_PKCS_PSS | 0x00000044 | 512–16384 sign, verify | 640–4096 hardware, sign, verify |
CKM_SHA512_RSA_PKCS_PSS | 0x00000045 | 512–16384 sign, verify | 768–4096 hardware, sign, verify |
CKM_SHA224_RSA_PKCS | 0x00000046 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA224_RSA_PKCS_PSS | 0x00000047 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA512_224 | 0x00000048 | - | - |
CKM_SHA512_224_HMAC | 0x00000049 | - | - |
CKM_SHA512_224_HMAC_GENERAL | 0x0000004A | - | - |
CKM_SHA512_224_KEY_DERIVATION | 0x0000004B | - | - |
CKM_SHA512_256 | 0x0000004C | - | - |
CKM_SHA512_256_HMAC | 0x0000004D | - | - |
CKM_SHA512_256_HMAC_GENERAL | 0x0000004E | - | - |
CKM_SHA512_256_KEY_DERIVATION | 0x0000004F | - | - |
CKM_SHA512_T | 0x00000050 | - | - |
CKM_SHA512_T_HMAC | 0x00000051 | - | - |
CKM_SHA512_T_HMAC_GENERAL | 0x00000052 | - | - |
CKM_SHA512_T_KEY_DERIVATION | 0x00000053 | - | - |
CKM_TLS12_EXTENDED_MASTER_KEY_DERIVE new in 3.2 | 0x00000056 | - | - |
CKM_TLS12_EXTENDED_MASTER_KEY_DERIVE_DH new in 3.2 | 0x00000057 | - | - |
CKM_SHA3_256_RSA_PKCS | 0x00000060 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA3_384_RSA_PKCS | 0x00000061 | 512–16384 sign, verify | 640–4096 hardware, sign, verify |
CKM_SHA3_512_RSA_PKCS | 0x00000062 | 512–16384 sign, verify | 768–4096 hardware, sign, verify |
CKM_SHA3_256_RSA_PKCS_PSS | 0x00000063 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA3_384_RSA_PKCS_PSS | 0x00000064 | 512–16384 sign, verify | 640–4096 hardware, sign, verify |
CKM_SHA3_512_RSA_PKCS_PSS | 0x00000065 | 512–16384 sign, verify | 768–4096 hardware, sign, verify |
CKM_SHA3_224_RSA_PKCS | 0x00000066 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_SHA3_224_RSA_PKCS_PSS | 0x00000067 | 512–16384 sign, verify | 512–4096 hardware, sign, verify |
CKM_RC2_KEY_GEN | 0x00000100 | - | 1–128 hardware, generate |
CKM_RC2_ECB | 0x00000101 | - | 1–128 hardware, encrypt, decrypt, wrap, unwrap |
CKM_RC2_CBC | 0x00000102 | - | 1–128 hardware, encrypt, decrypt, wrap, unwrap |
CKM_RC2_MAC | 0x00000103 | - | 1–128 hardware, sign, verify |
CKM_RC2_MAC_GENERAL | 0x00000104 | - | 1–128 hardware, sign, verify |
CKM_RC2_CBC_PAD | 0x00000105 | - | 1–128 hardware, encrypt, decrypt, wrap, unwrap |
CKM_RC4_KEY_GEN | 0x00000110 | - | 1–256 hardware, generate |
CKM_RC4 | 0x00000111 | - | 1–256 hardware, encrypt, decrypt |
CKM_DES_KEY_GEN | 0x00000120 | generate | 8–8 hardware, generate |
CKM_DES_ECB | 0x00000121 | encrypt, decrypt, wrap | 8–8 hardware, encrypt, decrypt, wrap, unwrap |
CKM_DES_CBC | 0x00000122 | encrypt, decrypt, wrap | 8–8 hardware, encrypt, decrypt, wrap, unwrap |
CKM_DES_MAC | 0x00000123 | - | 8–8 hardware, sign, verify |
CKM_DES_MAC_GENERAL | 0x00000124 | - | 8–8 hardware, sign, verify |
CKM_DES_CBC_PAD | 0x00000125 | encrypt, decrypt, wrap, unwrap | 8–8 hardware, encrypt, decrypt, wrap, unwrap |
CKM_DES2_KEY_GEN | 0x00000130 | generate | 16–16 hardware, generate |
CKM_DES3_KEY_GEN | 0x00000131 | generate | 24–24 hardware, generate |
CKM_DES3_ECB | 0x00000132 | encrypt, decrypt | 16–24 hardware, encrypt, decrypt, wrap, unwrap |
CKM_DES3_CBC | 0x00000133 | encrypt, decrypt, wrap | 16–24 hardware, encrypt, decrypt, wrap, unwrap |
CKM_DES3_MAC | 0x00000134 | - | 16–24 hardware, sign, verify |
CKM_DES3_MAC_GENERAL | 0x00000135 | - | 16–24 hardware, sign, verify |
CKM_DES3_CBC_PAD | 0x00000136 | encrypt, decrypt, wrap, unwrap | 16–24 hardware, encrypt, decrypt, wrap, unwrap |
CKM_DES3_CMAC_GENERAL | 0x00000137 | - | 16–24 hardware, sign, verify |
CKM_DES3_CMAC | 0x00000138 | sign, verify | 16–24 hardware, sign, verify |
CKM_CDMF_KEY_GEN | 0x00000140 | - | - |
CKM_CDMF_ECB | 0x00000141 | - | - |
CKM_CDMF_CBC | 0x00000142 | - | - |
CKM_CDMF_MAC | 0x00000143 | - | - |
CKM_CDMF_MAC_GENERAL | 0x00000144 | - | - |
CKM_CDMF_CBC_PAD | 0x00000145 | - | - |
CKM_DES_OFB64 | 0x00000150 | - | - |
CKM_DES_OFB8 | 0x00000151 | - | - |
CKM_DES_CFB64 | 0x00000152 | - | - |
CKM_DES_CFB8 | 0x00000153 | - | - |
CKM_MD2 | 0x00000200 | - | hardware, digest |
CKM_MD2_HMAC | 0x00000201 | - | hardware, sign, verify |
CKM_MD2_HMAC_GENERAL | 0x00000202 | - | hardware, sign, verify |
CKM_MD5 | 0x00000210 | digest | hardware, digest |
CKM_MD5_HMAC | 0x00000211 | 16–512 sign, verify | hardware, sign, verify |
CKM_MD5_HMAC_GENERAL | 0x00000212 | - | hardware, sign, verify |
CKM_SHA_1 | 0x00000220 | digest | hardware, digest |
CKM_SHA_1_HMAC | 0x00000221 | 20–512 sign, verify | hardware, sign, verify |
CKM_SHA_1_HMAC_GENERAL | 0x00000222 | - | hardware, sign, verify |
CKM_RIPEMD128 | 0x00000230 | - | hardware, digest |
CKM_RIPEMD128_HMAC | 0x00000231 | - | hardware, sign, verify |
CKM_RIPEMD128_HMAC_GENERAL | 0x00000232 | - | hardware, sign, verify |
CKM_RIPEMD160 | 0x00000240 | - | hardware, digest |
CKM_RIPEMD160_HMAC | 0x00000241 | - | hardware, sign, verify |
CKM_RIPEMD160_HMAC_GENERAL | 0x00000242 | - | hardware, sign, verify |
CKM_SHA256 | 0x00000250 | digest | hardware, digest |
CKM_SHA256_HMAC | 0x00000251 | 32–512 sign, verify | hardware, sign, verify |
CKM_SHA256_HMAC_GENERAL | 0x00000252 | - | hardware, sign, verify |
CKM_SHA224 | 0x00000255 | digest | hardware, digest |
CKM_SHA224_HMAC | 0x00000256 | 28–512 sign, verify | hardware, sign, verify |
CKM_SHA224_HMAC_GENERAL | 0x00000257 | - | hardware, sign, verify |
CKM_SHA384 | 0x00000260 | digest | hardware, digest |
CKM_SHA384_HMAC | 0x00000261 | 48–512 sign, verify | hardware, sign, verify |
CKM_SHA384_HMAC_GENERAL | 0x00000262 | - | hardware, sign, verify |
CKM_SHA512 | 0x00000270 | digest | hardware, digest |
CKM_SHA512_HMAC | 0x00000271 | 64–512 sign, verify | hardware, sign, verify |
CKM_SHA512_HMAC_GENERAL | 0x00000272 | - | hardware, sign, verify |
CKM_SECURID_KEY_GEN | 0x00000280 | - | - |
CKM_SECURID | 0x00000282 | - | - |
CKM_HOTP_KEY_GEN | 0x00000290 | - | - |
CKM_HOTP | 0x00000291 | - | - |
CKM_ACTI | 0x000002A0 | - | - |
CKM_ACTI_KEY_GEN | 0x000002A1 | - | - |
CKM_SHA3_256 | 0x000002B0 | digest | hardware, digest |
CKM_SHA3_256_HMAC | 0x000002B1 | 32–512 sign, verify | hardware, sign, verify |
CKM_SHA3_256_HMAC_GENERAL | 0x000002B2 | - | hardware, sign, verify |
CKM_SHA3_256_KEY_GEN | 0x000002B3 | - | - |
CKM_SHA3_224 | 0x000002B5 | digest | hardware, digest |
CKM_SHA3_224_HMAC | 0x000002B6 | 28–512 sign, verify | hardware, sign, verify |
CKM_SHA3_224_HMAC_GENERAL | 0x000002B7 | - | hardware, sign, verify |
CKM_SHA3_224_KEY_GEN | 0x000002B8 | - | - |
CKM_SHA3_384 | 0x000002C0 | digest | hardware, digest |
CKM_SHA3_384_HMAC | 0x000002C1 | 48–512 sign, verify | hardware, sign, verify |
CKM_SHA3_384_HMAC_GENERAL | 0x000002C2 | - | hardware, sign, verify |
CKM_SHA3_384_KEY_GEN | 0x000002C3 | - | - |
CKM_SHA3_512 | 0x000002D0 | digest | hardware, digest |
CKM_SHA3_512_HMAC | 0x000002D1 | 64–512 sign, verify | hardware, sign, verify |
CKM_SHA3_512_HMAC_GENERAL | 0x000002D2 | - | hardware, sign, verify |
CKM_SHA3_512_KEY_GEN | 0x000002D3 | - | - |
CKM_CAST_KEY_GEN | 0x00000300 | - | - |
CKM_CAST_ECB | 0x00000301 | - | - |
CKM_CAST_CBC | 0x00000302 | - | - |
CKM_CAST_MAC | 0x00000303 | - | - |
CKM_CAST_MAC_GENERAL | 0x00000304 | - | - |
CKM_CAST_CBC_PAD | 0x00000305 | - | - |
CKM_CAST3_KEY_GEN | 0x00000310 | - | - |
CKM_CAST3_ECB | 0x00000311 | - | - |
CKM_CAST3_CBC | 0x00000312 | - | - |
CKM_CAST3_MAC | 0x00000313 | - | - |
CKM_CAST3_MAC_GENERAL | 0x00000314 | - | - |
CKM_CAST3_CBC_PAD | 0x00000315 | - | - |
CKM_CAST5_KEY_GEN | 0x00000320 | - | 1–16 hardware, generate |
CKM_CAST5_ECB | 0x00000321 | - | 1–16 hardware, encrypt, decrypt, wrap, unwrap |
CKM_CAST5_CBC | 0x00000322 | - | 1–16 hardware, encrypt, decrypt, wrap, unwrap |
CKM_CAST5_MAC | 0x00000323 | - | 1–16 hardware, sign, verify |
CKM_CAST5_MAC_GENERAL | 0x00000324 | - | 1–16 hardware, sign, verify |
CKM_CAST5_CBC_PAD | 0x00000325 | - | 1–16 hardware, encrypt, decrypt, wrap, unwrap |
CKM_RC5_KEY_GEN | 0x00000330 | - | - |
CKM_RC5_ECB | 0x00000331 | - | - |
CKM_RC5_CBC | 0x00000332 | - | - |
CKM_RC5_MAC | 0x00000333 | - | - |
CKM_RC5_MAC_GENERAL | 0x00000334 | - | - |
CKM_RC5_CBC_PAD | 0x00000335 | - | - |
CKM_IDEA_KEY_GEN | 0x00000340 | - | 16–16 hardware, generate |
CKM_IDEA_ECB | 0x00000341 | - | 16–16 hardware, encrypt, decrypt, wrap, unwrap |
CKM_IDEA_CBC | 0x00000342 | - | 16–16 hardware, encrypt, decrypt, wrap, unwrap |
CKM_IDEA_MAC | 0x00000343 | - | 16–16 hardware, sign, verify |
CKM_IDEA_MAC_GENERAL | 0x00000344 | - | 16–16 hardware, sign, verify |
CKM_IDEA_CBC_PAD | 0x00000345 | - | 16–16 hardware, encrypt, decrypt, wrap, unwrap |
CKM_GENERIC_SECRET_KEY_GEN | 0x00000350 | 1–134217728 generate | hardware, generate |
CKM_CONCATENATE_BASE_AND_KEY | 0x00000360 | 1–512 derive | - |
CKM_CONCATENATE_BASE_AND_DATA | 0x00000362 | 1–512 derive | - |
CKM_CONCATENATE_DATA_AND_BASE | 0x00000363 | 1–512 derive | - |
CKM_XOR_BASE_AND_DATA | 0x00000364 | - | - |
CKM_EXTRACT_KEY_FROM_KEY | 0x00000365 | - | - |
CKM_SSL3_PRE_MASTER_KEY_GEN | 0x00000370 | - | 48–48 hardware, generate |
CKM_SSL3_MASTER_KEY_DERIVE | 0x00000371 | - | 48–48 hardware, derive |
CKM_SSL3_KEY_AND_MAC_DERIVE | 0x00000372 | - | 48–48 hardware, derive |
CKM_SSL3_MASTER_KEY_DERIVE_DH | 0x00000373 | - | - |
CKM_TLS_PRE_MASTER_KEY_GEN | 0x00000374 | - | - |
CKM_TLS_MASTER_KEY_DERIVE | 0x00000375 | - | - |
CKM_TLS_KEY_AND_MAC_DERIVE | 0x00000376 | - | - |
CKM_TLS_MASTER_KEY_DERIVE_DH | 0x00000377 | - | - |
CKM_TLS_PRF | 0x00000378 | - | - |
CKM_SSL3_MD5_MAC | 0x00000380 | - | hardware, sign, verify |
CKM_SSL3_SHA1_MAC | 0x00000381 | - | hardware, sign, verify |
CKM_MD5_KEY_DERIVATION | 0x00000390 | - | hardware, derive |
CKM_MD2_KEY_DERIVATION | 0x00000391 | - | hardware, derive |
CKM_SHA1_KEY_DERIVATION | 0x00000392 | - | hardware, derive |
CKM_SHA256_KEY_DERIVATION | 0x00000393 | - | hardware, derive |
CKM_SHA384_KEY_DERIVATION | 0x00000394 | - | hardware, derive |
CKM_SHA512_KEY_DERIVATION | 0x00000395 | - | hardware, derive |
CKM_SHA224_KEY_DERIVATION | 0x00000396 | - | hardware, derive |
CKM_SHA3_256_KEY_DERIVATION | 0x00000397 | - | hardware, derive |
CKM_SHA3_224_KEY_DERIVATION | 0x00000398 | - | hardware, derive |
CKM_SHA3_384_KEY_DERIVATION | 0x00000399 | - | hardware, derive |
CKM_SHA3_512_KEY_DERIVATION | 0x0000039A | - | hardware, derive |
CKM_SHAKE_128_KEY_DERIVATION | 0x0000039B | - | - |
CKM_SHAKE_256_KEY_DERIVATION | 0x0000039C | - | - |
CKM_PBE_MD2_DES_CBC | 0x000003A0 | - | 8–8 hardware, generate |
CKM_PBE_MD5_DES_CBC | 0x000003A1 | - | 8–8 hardware, generate |
CKM_PBE_MD5_CAST_CBC | 0x000003A2 | - | - |
CKM_PBE_MD5_CAST3_CBC | 0x000003A3 | - | - |
CKM_PBE_MD5_CAST5_CBC | 0x000003A4 | - | 16–16 hardware, generate |
CKM_PBE_SHA1_CAST5_CBC | 0x000003A5 | - | 16–16 hardware, generate |
CKM_PBE_SHA1_RC4_128 | 0x000003A6 | - | 16–16 hardware, generate |
CKM_PBE_SHA1_RC4_40 | 0x000003A7 | - | 5–5 hardware, generate |
CKM_PBE_SHA1_DES3_EDE_CBC | 0x000003A8 | - | 24–24 hardware, generate |
CKM_PBE_SHA1_DES2_EDE_CBC | 0x000003A9 | - | 16–16 hardware, generate |
CKM_PBE_SHA1_RC2_128_CBC | 0x000003AA | - | 16–16 hardware, generate |
CKM_PBE_SHA1_RC2_40_CBC | 0x000003AB | - | 5–5 hardware, generate |
CKM_SP800_108_COUNTER_KDF | 0x000003AC | - | - |
CKM_SP800_108_FEEDBACK_KDF | 0x000003AD | - | - |
CKM_SP800_108_DOUBLE_PIPELINE_KDF | 0x000003AE | - | - |
CKM_PKCS5_PBKD2 | 0x000003B0 | - | - |
CKM_PBA_SHA1_WITH_SHA1_HMAC | 0x000003C0 | - | 20–20 hardware, generate |
CKM_WTLS_PRE_MASTER_KEY_GEN | 0x000003D0 | - | - |
CKM_WTLS_MASTER_KEY_DERIVE | 0x000003D1 | - | - |
CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC | 0x000003D2 | - | - |
CKM_WTLS_PRF | 0x000003D3 | - | - |
CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE | 0x000003D4 | - | - |
CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE | 0x000003D5 | - | - |
CKM_TLS10_MAC_SERVER | 0x000003D6 | - | - |
CKM_TLS10_MAC_CLIENT | 0x000003D7 | - | - |
CKM_TLS12_MAC | 0x000003D8 | - | - |
CKM_TLS12_KDF | 0x000003D9 | - | - |
CKM_TLS12_MASTER_KEY_DERIVE | 0x000003E0 | - | - |
CKM_TLS12_KEY_AND_MAC_DERIVE | 0x000003E1 | - | - |
CKM_TLS12_MASTER_KEY_DERIVE_DH | 0x000003E2 | - | - |
CKM_TLS12_KEY_SAFE_DERIVE | 0x000003E3 | - | - |
CKM_TLS_MAC | 0x000003E4 | - | - |
CKM_TLS_KDF | 0x000003E5 | - | - |
CKM_KEY_WRAP_LYNKS | 0x00000400 | - | - |
CKM_KEY_WRAP_SET_OAEP | 0x00000401 | - | 512–4096 hardware, wrap, unwrap |
CKM_CMS_SIG | 0x00000500 | - | - |
CKM_KIP_DERIVE | 0x00000510 | - | - |
CKM_KIP_WRAP | 0x00000511 | - | - |
CKM_KIP_MAC | 0x00000512 | - | - |
CKM_CAMELLIA_KEY_GEN | 0x00000550 | - | - |
CKM_CAMELLIA_ECB | 0x00000551 | - | - |
CKM_CAMELLIA_CBC | 0x00000552 | - | - |
CKM_CAMELLIA_MAC | 0x00000553 | - | - |
CKM_CAMELLIA_MAC_GENERAL | 0x00000554 | - | - |
CKM_CAMELLIA_CBC_PAD | 0x00000555 | - | - |
CKM_CAMELLIA_ECB_ENCRYPT_DATA | 0x00000556 | - | - |
CKM_CAMELLIA_CBC_ENCRYPT_DATA | 0x00000557 | - | - |
CKM_CAMELLIA_CTR | 0x00000558 | - | - |
CKM_ARIA_KEY_GEN | 0x00000560 | - | 16–32 hardware, generate |
CKM_ARIA_ECB | 0x00000561 | - | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_ARIA_CBC | 0x00000562 | - | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_ARIA_MAC | 0x00000563 | - | 16–32 hardware, sign, verify |
CKM_ARIA_MAC_GENERAL | 0x00000564 | - | 16–32 hardware, sign, verify |
CKM_ARIA_CBC_PAD | 0x00000565 | - | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_ARIA_ECB_ENCRYPT_DATA | 0x00000566 | - | - |
CKM_ARIA_CBC_ENCRYPT_DATA | 0x00000567 | - | - |
CKM_SEED_KEY_GEN | 0x00000650 | - | - |
CKM_SEED_ECB | 0x00000651 | - | - |
CKM_SEED_CBC | 0x00000652 | - | - |
CKM_SEED_MAC | 0x00000653 | - | - |
CKM_SEED_MAC_GENERAL | 0x00000654 | - | - |
CKM_SEED_CBC_PAD | 0x00000655 | - | - |
CKM_SEED_ECB_ENCRYPT_DATA | 0x00000656 | - | - |
CKM_SEED_CBC_ENCRYPT_DATA | 0x00000657 | - | - |
CKM_SKIPJACK_KEY_GEN | 0x00001000 | - | - |
CKM_SKIPJACK_ECB64 | 0x00001001 | - | - |
CKM_SKIPJACK_CBC64 | 0x00001002 | - | - |
CKM_SKIPJACK_OFB64 | 0x00001003 | - | - |
CKM_SKIPJACK_CFB64 | 0x00001004 | - | - |
CKM_SKIPJACK_CFB32 | 0x00001005 | - | - |
CKM_SKIPJACK_CFB16 | 0x00001006 | - | - |
CKM_SKIPJACK_CFB8 | 0x00001007 | - | - |
CKM_SKIPJACK_WRAP | 0x00001008 | - | - |
CKM_SKIPJACK_PRIVATE_WRAP | 0x00001009 | - | - |
CKM_SKIPJACK_RELAYX | 0x0000100A | - | - |
CKM_KEA_KEY_PAIR_GEN | 0x00001010 | - | - |
CKM_KEA_KEY_DERIVE | 0x00001011 | - | - |
CKM_KEA_DERIVE | 0x00001012 | - | - |
CKM_FORTEZZA_TIMESTAMP | 0x00001020 | - | - |
CKM_BATON_KEY_GEN | 0x00001030 | - | - |
CKM_BATON_ECB128 | 0x00001031 | - | - |
CKM_BATON_ECB96 | 0x00001032 | - | - |
CKM_BATON_CBC128 | 0x00001033 | - | - |
CKM_BATON_COUNTER | 0x00001034 | - | - |
CKM_BATON_SHUFFLE | 0x00001035 | - | - |
CKM_BATON_WRAP | 0x00001036 | - | - |
CKM_ECDSA_KEY_PAIR_GEN | 0x00001040 | 112–521 generate_key_pair, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, generate_key_pair, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDSA | 0x00001041 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDSA_SHA1 | 0x00001042 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDSA_SHA224 | 0x00001043 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | - |
CKM_ECDSA_SHA256 | 0x00001044 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | - |
CKM_ECDSA_SHA384 | 0x00001045 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | - |
CKM_ECDSA_SHA512 | 0x00001046 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | - |
CKM_ECDSA_SHA3_224 | 0x00001047 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDSA_SHA3_256 | 0x00001048 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDSA_SHA3_384 | 0x00001049 | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDSA_SHA3_512 | 0x0000104A | 112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress | 64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDH1_DERIVE | 0x00001050 | 112–521 derive | 64–571 hardware, derive, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_ECDH1_COFACTOR_DERIVE | 0x00001051 | - | - |
CKM_ECMQV_DERIVE | 0x00001052 | - | - |
CKM_ECDH_AES_KEY_WRAP | 0x00001053 | - | - |
CKM_RSA_AES_KEY_WRAP | 0x00001054 | 512–16384 wrap, unwrap | - |
CKM_EC_EDWARDS_KEY_PAIR_GEN | 0x00001055 | 255–448 generate_key_pair | 64–571 generate_key_pair, ec_f_p, ec_oid, ec_uncompress |
CKM_EC_MONTGOMERY_KEY_PAIR_GEN | 0x00001056 | - | 64–571 hardware, generate_key_pair, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
CKM_EDDSA | 0x00001057 | 255–448 sign, verify | 64–571 sign, verify, ec_f_p, ec_oid, ec_uncompress |
CKM_JUNIPER_KEY_GEN | 0x00001060 | - | - |
CKM_JUNIPER_ECB128 | 0x00001061 | - | - |
CKM_JUNIPER_CBC128 | 0x00001062 | - | - |
CKM_JUNIPER_COUNTER | 0x00001063 | - | - |
CKM_JUNIPER_SHUFFLE | 0x00001064 | - | - |
CKM_JUNIPER_WRAP | 0x00001065 | - | - |
CKM_FASTHASH | 0x00001070 | - | - |
CKM_AES_XTS | 0x00001071 | - | - |
CKM_AES_XTS_KEY_GEN | 0x00001072 | - | - |
CKM_AES_KEY_GEN | 0x00001080 | 16–32 generate | 16–32 hardware, generate |
CKM_AES_ECB | 0x00001081 | 16–32 encrypt, decrypt | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_AES_CBC | 0x00001082 | 16–32 encrypt, decrypt, wrap, unwrap | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_AES_MAC | 0x00001083 | - | 16–32 hardware, sign, verify |
CKM_AES_MAC_GENERAL | 0x00001084 | - | 16–32 hardware, sign, verify |
CKM_AES_CBC_PAD | 0x00001085 | 16–32 encrypt, decrypt, wrap, unwrap | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_AES_CTR | 0x00001086 | 16–32 encrypt, decrypt | 16–32 hardware, encrypt, decrypt |
CKM_AES_GCM | 0x00001087 | 16–32 encrypt, decrypt | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_AES_CCM | 0x00001088 | - | 16–32 hardware, encrypt, decrypt |
CKM_AES_CTS | 0x00001089 | - | - |
CKM_AES_CMAC | 0x0000108A | 16–32 sign, verify | 16–32 hardware, sign, verify |
CKM_AES_CMAC_GENERAL | 0x0000108B | - | 16–32 hardware, sign, verify |
CKM_AES_XCBC_MAC | 0x0000108C | - | - |
CKM_AES_XCBC_MAC_96 | 0x0000108D | - | - |
CKM_AES_GMAC | 0x0000108E | - | 16–32 hardware, sign, verify |
CKM_BLOWFISH_KEY_GEN | 0x00001090 | - | 16–32 hardware, wrap, unwrap |
CKM_BLOWFISH_CBC | 0x00001091 | - | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_TWOFISH_KEY_GEN | 0x00001092 | - | - |
CKM_TWOFISH_CBC | 0x00001093 | - | - |
CKM_BLOWFISH_CBC_PAD | 0x00001094 | - | - |
CKM_TWOFISH_CBC_PAD | 0x00001095 | - | - |
CKM_DES_ECB_ENCRYPT_DATA | 0x00001100 | derive | 8–8 hardware, derive |
CKM_DES_CBC_ENCRYPT_DATA | 0x00001101 | derive | 8–8 hardware, derive |
CKM_DES3_ECB_ENCRYPT_DATA | 0x00001102 | derive | 16–24 hardware, derive |
CKM_DES3_CBC_ENCRYPT_DATA | 0x00001103 | derive | 16–24 hardware, derive |
CKM_AES_ECB_ENCRYPT_DATA | 0x00001104 | derive | 16–32 hardware, derive |
CKM_AES_CBC_ENCRYPT_DATA | 0x00001105 | derive | 16–32 hardware, derive |
CKM_GOSTR3410_KEY_PAIR_GEN | 0x00001200 | - | - |
CKM_GOSTR3410 | 0x00001201 | - | - |
CKM_GOSTR3410_WITH_GOSTR3411 | 0x00001202 | - | - |
CKM_GOSTR3410_KEY_WRAP | 0x00001203 | - | - |
CKM_GOSTR3410_DERIVE | 0x00001204 | - | - |
CKM_GOSTR3411 | 0x00001210 | - | - |
CKM_GOSTR3411_HMAC | 0x00001211 | - | - |
CKM_GOST28147_KEY_GEN | 0x00001220 | - | - |
CKM_GOST28147_ECB | 0x00001221 | - | - |
CKM_GOST28147 | 0x00001222 | - | - |
CKM_GOST28147_MAC | 0x00001223 | - | - |
CKM_GOST28147_KEY_WRAP | 0x00001224 | - | - |
CKM_CHACHA20_KEY_GEN | 0x00001225 | - | - |
CKM_CHACHA20 | 0x00001226 | - | - |
CKM_POLY1305_KEY_GEN | 0x00001227 | - | - |
CKM_POLY1305 | 0x00001228 | - | - |
CKM_EC_KEY_PAIR_GEN_W_EXTRA_BITS | 0x0000140B | - | - |
CKM_DSA_PARAMETER_GEN | 0x00002000 | 512–1024 generate | 512–3072 hardware, generate |
CKM_DH_PKCS_PARAMETER_GEN | 0x00002001 | 512–10000 generate | 512–4096 hardware, generate |
CKM_X9_42_DH_PARAMETER_GEN | 0x00002002 | - | 1024–4096 hardware, generate |
CKM_DSA_PROBABILISTIC_PARAMETER_GEN | 0x00002003 | - | - |
CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN | 0x00002004 | - | - |
CKM_DSA_FIPS_G_GEN | 0x00002005 | - | - |
CKM_AES_OFB | 0x00002104 | - | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_AES_CFB64 | 0x00002105 | - | - |
CKM_AES_CFB8 | 0x00002106 | - | - |
CKM_AES_CFB128 | 0x00002107 | - | - |
CKM_AES_CFB1 | 0x00002108 | - | - |
CKM_AES_KEY_WRAP | 0x00002109 | 16–2147483648 wrap, unwrap | 16–32 hardware, wrap, unwrap |
CKM_AES_KEY_WRAP_PAD | 0x0000210A | 1–2147483648 wrap, unwrap | 16–32 hardware, encrypt, decrypt, wrap, unwrap |
CKM_AES_KEY_WRAP_KWP | 0x0000210B | - | - |
CKM_AES_KEY_WRAP_PKCS7 | 0x0000210C | - | - |
CKM_RSA_PKCS_TPM_1_1 | 0x00004001 | - | - |
CKM_RSA_PKCS_OAEP_TPM_1_1 | 0x00004002 | - | - |
CKM_SHA_1_KEY_GEN | 0x00004003 | - | - |
CKM_SHA224_KEY_GEN | 0x00004004 | - | - |
CKM_SHA256_KEY_GEN | 0x00004005 | - | - |
CKM_SHA384_KEY_GEN | 0x00004006 | - | - |
CKM_SHA512_KEY_GEN | 0x00004007 | - | - |
CKM_SHA512_224_KEY_GEN | 0x00004008 | - | - |
CKM_SHA512_256_KEY_GEN | 0x00004009 | - | - |
CKM_SHA512_T_KEY_GEN | 0x0000400A | - | - |
CKM_NULL | 0x0000400B | - | - |
CKM_BLAKE2B_160 | 0x0000400C | - | - |
CKM_BLAKE2B_160_HMAC | 0x0000400D | - | - |
CKM_BLAKE2B_160_HMAC_GENERAL | 0x0000400E | - | - |
CKM_BLAKE2B_160_KEY_DERIVE | 0x0000400F | - | - |
CKM_BLAKE2B_160_KEY_GEN | 0x00004010 | - | - |
CKM_BLAKE2B_256 | 0x00004011 | - | - |
CKM_BLAKE2B_256_HMAC | 0x00004012 | - | - |
CKM_BLAKE2B_256_HMAC_GENERAL | 0x00004013 | - | - |
CKM_BLAKE2B_256_KEY_DERIVE | 0x00004014 | - | - |
CKM_BLAKE2B_256_KEY_GEN | 0x00004015 | - | - |
CKM_BLAKE2B_384 | 0x00004016 | - | - |
CKM_BLAKE2B_384_HMAC | 0x00004017 | - | - |
CKM_BLAKE2B_384_HMAC_GENERAL | 0x00004018 | - | - |
CKM_BLAKE2B_384_KEY_DERIVE | 0x00004019 | - | - |
CKM_BLAKE2B_384_KEY_GEN | 0x0000401A | - | - |
CKM_BLAKE2B_512 | 0x0000401B | - | - |
CKM_BLAKE2B_512_HMAC | 0x0000401C | - | - |
CKM_BLAKE2B_512_HMAC_GENERAL | 0x0000401D | - | - |
CKM_BLAKE2B_512_KEY_DERIVE | 0x0000401E | - | - |
CKM_BLAKE2B_512_KEY_GEN | 0x0000401F | - | - |
CKM_SALSA20 | 0x00004020 | - | - |
CKM_CHACHA20_POLY1305 | 0x00004021 | - | - |
CKM_SALSA20_POLY1305 | 0x00004022 | - | - |
CKM_X3DH_INITIALIZE | 0x00004023 | - | - |
CKM_X3DH_RESPOND | 0x00004024 | - | - |
CKM_X2RATCHET_INITIALIZE | 0x00004025 | - | - |
CKM_X2RATCHET_RESPOND | 0x00004026 | - | - |
CKM_X2RATCHET_ENCRYPT | 0x00004027 | - | - |
CKM_X2RATCHET_DECRYPT | 0x00004028 | - | - |
CKM_XEDDSA | 0x00004029 | - | - |
CKM_HKDF_DERIVE | 0x0000402A | - | - |
CKM_HKDF_DATA | 0x0000402B | - | - |
CKM_HKDF_KEY_GEN | 0x0000402C | - | - |
CKM_SALSA20_KEY_GEN | 0x0000402D | - | - |
CKM_IKE2_PRF_PLUS_DERIVE | 0x0000402E | - | - |
CKM_IKE_PRF_DERIVE | 0x0000402F | - | - |
CKM_IKE1_PRF_DERIVE | 0x00004030 | - | - |
CKM_IKE1_EXTENDED_DERIVE | 0x00004031 | - | - |
CKM_HSS_KEY_PAIR_GEN | 0x00004032 | - | - |
CKM_HSS | 0x00004033 | - | - |
CKM_XMSS_KEY_PAIR_GEN new in 3.2 | 0x00004034 | - | - |
CKM_XMSSMT_KEY_PAIR_GEN new in 3.2 | 0x00004035 | - | - |
CKM_XMSS new in 3.2 | 0x00004036 | - | - |
CKM_XMSSMT new in 3.2 | 0x00004037 | - | - |
CKM_ECDH_X_AES_KEY_WRAP new in 3.2 | 0x00004038 | - | - |
CKM_ECDH_COF_AES_KEY_WRAP new in 3.2 | 0x00004039 | - | - |
CKM_PUB_KEY_FROM_PRIV_KEY new in 3.2 | 0x0000403A | - | - |
CKM_VENDOR_DEFINED | 0x80000000 | - | - |
Exposed but not named by the specification
93 vendor-range values that a library listed. The specification defines nothing here and the vendors do not publish the numbers, so the value and the flags are all that can be shown.
| Hex | Library | Keys | Operations |
|---|---|---|---|
0x80000013 | Thales ProtectServer | 512–3072 | hardware, sign, verify |
0x80000032 | Thales ProtectServer | 1024–3072 | hardware, sign, verify |
0x80000033 | Thales ProtectServer | 1024–3072 | hardware, sign, verify |
0x80000034 | Thales ProtectServer | 1024–3072 | hardware, sign, verify |
0x80000035 | Thales ProtectServer | 1024–3072 | hardware, sign, verify |
0x80000036 | Thales ProtectServer | 1024–3072 | hardware, sign, verify |
0x80000037 | Thales ProtectServer | 1024–3072 | hardware, sign, verify |
0x80000101 | Thales ProtectServer | 1–128 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000121 | Thales ProtectServer | 8–8 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000122 | Thales ProtectServer | 64–571 | hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
0x80000123 | Thales ProtectServer | 64–571 | hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
0x80000124 | Thales ProtectServer | 64–571 | hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
0x80000125 | Thales ProtectServer | 64–571 | hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
0x80000132 | Thales ProtectServer | 16–24 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000134 | Thales ProtectServer | 16–24 | hardware, sign, verify |
0x80000135 | Thales ProtectServer | 16–24 | hardware, sign, verify |
0x80000161 | Thales ProtectServer | 64–571 | hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
0x80000170 | Thales ProtectServer | 16–32 | hardware, wrap, unwrap |
0x80000171 | Thales ProtectServer | 16–32 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000172 | Thales ProtectServer | 16–24 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000200 | Thales ProtectServer | - | hardware, digest |
0x80000204 | Thales ProtectServer | - | hardware, digest |
0x80000205 | Thales ProtectServer | - | hardware, digest |
0x80000321 | Thales ProtectServer | 1–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000341 | Thales ProtectServer | 16–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x8000038E | Thales ProtectServer | 8–8 | hardware, encrypt, decrypt, wrap, unwrap |
0x8000038F | Thales ProtectServer | 16–24 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000400 | Thales ProtectServer | 2048–4096 | hardware, generate_key_pair |
0x80000411 | Thales ProtectServer | 16–32 | hardware, unwrap |
0x80000412 | Thales ProtectServer | 16–32 | hardware, wrap |
0x80000413 | Thales ProtectServer | 16–32 | hardware, wrap |
0x80000500 | Thales ProtectServer | 8–8 | hardware, derive |
0x80000501 | Thales ProtectServer | 8–8 | hardware, derive |
0x80000502 | Thales ProtectServer | 16–24 | hardware, derive |
0x80000503 | Thales ProtectServer | 16–24 | hardware, derive |
0x80000510 | Thales ProtectServer | 16–24 | hardware, sign, verify |
0x80000511 | Thales ProtectServer | 16–16 | hardware, derive |
0x80000512 | Thales ProtectServer | 16–16 | hardware, sign |
0x80000513 | Thales ProtectServer | 16–32 | hardware, sign |
0x80000514 | Thales ProtectServer | 16–32 | hardware, derive |
0x80000515 | Thales ProtectServer | - | hardware, digest |
0x80000600 | Thales ProtectServer | 512–4096 | hardware, sign |
0x80000935 | Thales ProtectServer | - | hardware, derive |
0x80000940 | Thales ProtectServer | 8–8 | hardware, encrypt, decrypt |
0x80000941 | Thales ProtectServer | 16–24 | hardware, encrypt, decrypt |
0x80000950 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x80000951 | Thales ProtectServer | - | hardware, derive |
0x80000952 | Thales ProtectServer | - | hardware, derive |
0x80000953 | Thales ProtectServer | - | hardware, derive |
0x80000954 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x80000955 | Thales ProtectServer | - | hardware, derive |
0x80000961 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x80000962 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x80000963 | Thales ProtectServer | 16–32 | hardware, wrap, unwrap |
0x80000964 | Thales ProtectServer | 16–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x80000965 | Thales ProtectServer | 16–32 | hardware, wrap, unwrap |
0x80000966 | Thales ProtectServer | 16–32 | hardware, encrypt, decrypt |
0x80000970 | Thales ProtectServer | 16–32 | hardware, wrap, unwrap |
0x80000971 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x800009A0 | Thales ProtectServer | 1–0 | generate |
0x800009A1 | Thales ProtectServer | 1–0 | generate |
0x800009B0 | Thales ProtectServer | 16–16 | hardware, sign, verify |
0x800009C0 | Thales ProtectServer | - | hardware, derive |
0x800009D0 | Thales ProtectServer | 16–16 | hardware, generate |
0x800009D1 | Thales ProtectServer | 16–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x800009D2 | Thales ProtectServer | 16–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x800009D3 | Thales ProtectServer | 16–16 | hardware, sign, verify |
0x800009D4 | Thales ProtectServer | 16–16 | hardware, sign, verify |
0x800009D5 | Thales ProtectServer | 16–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x800009D6 | Thales ProtectServer | 16–16 | hardware, encrypt, decrypt, wrap, unwrap |
0x800009E0 | Thales ProtectServer | 2048–4096 | hardware, wrap, unwrap |
0x800009F0 | Thales ProtectServer | - | hardware, derive |
0x800009F1 | Thales ProtectServer | - | hardware, derive |
0x800009F2 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x800009F3 | Thales ProtectServer | - | hardware, wrap, unwrap |
0x80000A00 | Thales ProtectServer | 64–571 | hardware, encrypt, decrypt, ec_f_p, ec_f_2m, ec_oid, ec_uncompress |
0x80000A10 | Thales ProtectServer | 1024–4096 | hardware, extension |
0x80000C09 | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80000C0A | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80000C0B | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80000C0C | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80000C0D | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80000E00 | Thales ProtectServer | 64–571 | hardware, derive, ec_f_p, ec_uncompress |
0x80000E01 | Thales ProtectServer | 64–571 | hardware, derive, ec_f_p, ec_uncompress |
0x80001000 | Thales ProtectServer | 521–521 | hardware, generate_key_pair |
0x80001001 | Thales ProtectServer | 521–521 | hardware, generate |
0x80001002 | Thales ProtectServer | 16–32 | hardware, derive |
0x80001003 | Thales ProtectServer | 16–32 | hardware, derive |
0x80001004 | Thales ProtectServer | 32–32 | hardware, encrypt, decrypt |
0x80001C0A | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80001C0B | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80001C0C | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
0x80001C0D | Thales ProtectServer | 64–571 | sign, verify, ec_f_p, ec_oid, ec_uncompress |
Names and numbers from the OASIS header. Key sizes and
flags from C_GetMechanismInfo on each library, read-only.
A mechanism is listed under the first name the header gives its value,
so a few aliases the header also defines are not shown.