808bits

PKCS#11 mechanisms by value

464 mechanisms in PKCS#11 v3.2 · 37 new in 3.2 · 182 observed on IBM opencryptoki · 103 observed on SoftHSMv2 · 279 observed on Thales ProtectServer

A mechanism number in a log is only half a fact. The other half is whether the library in front of you exposes it, for which key sizes, and for which operations, and that half lives in C_GetMechanismInfo where most status tools never look. The columns on the right are what the probe read off each library, on the date and build named on its page. A dash means the library did not list it, which on a hardware token can be policy rather than capability.

Named by the specification

MechanismHexIBM opencryptokiSoftHSMv2Thales ProtectServer
CKM_RSA_PKCS_KEY_PAIR_GEN0x00000000512–16384 generate_key_pair512–16384 generate_key_pair512–4096 hardware, generate_key_pair
CKM_RSA_PKCS0x00000001512–16384 encrypt, decrypt, wrap, unwrap, sign, verify, sign_recover, verify_recover, encapsulate, decapsulate512–16384 encrypt, decrypt, sign, verify, wrap, unwrap512–4096 hardware, encrypt, decrypt, sign, sign_recover, verify, verify_recover, wrap, unwrap
CKM_RSA_97960x00000002--512–4096 hardware, sign, sign_recover, verify, verify_recover
CKM_RSA_X_5090x00000003512–16384 encrypt, decrypt, wrap, unwrap, sign, verify, sign_recover, verify_recover512–16384 encrypt, decrypt, sign, verify512–4096 hardware, encrypt, decrypt, sign, sign_recover, verify, verify_recover, wrap, unwrap
CKM_MD2_RSA_PKCS0x00000004512–16384 sign, verify-512–4096 hardware, sign, verify
CKM_MD5_RSA_PKCS0x00000005512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA1_RSA_PKCS0x00000006512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_RIPEMD128_RSA_PKCS0x00000007--512–4096 hardware, sign, verify
CKM_RIPEMD160_RSA_PKCS0x00000008--512–4096 hardware, sign, verify
CKM_RSA_PKCS_OAEP0x00000009512–16384 encrypt, decrypt, wrap, unwrap, encapsulate, decapsulate512–16384 encrypt, decrypt, wrap, unwrap512–4096 hardware, encrypt, decrypt, wrap, unwrap
CKM_RSA_X9_31_KEY_PAIR_GEN0x0000000A--1024–4096 hardware, generate_key_pair
CKM_RSA_X9_310x0000000B---
CKM_SHA1_RSA_X9_310x0000000C---
CKM_RSA_PKCS_PSS0x0000000D512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA1_RSA_PKCS_PSS0x0000000E512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_ML_KEM_KEY_PAIR_GEN new in 3.20x0000000F800–1568 generate_key_pair--
CKM_DSA_KEY_PAIR_GEN0x00000010512–1024 generate_key_pair512–1024 generate_key_pair512–3072 hardware, generate_key_pair
CKM_DSA0x00000011512–1024 sign, verify512–1024 sign, verify512–3072 hardware, sign, verify
CKM_DSA_SHA10x00000012-512–1024 sign, verify512–3072 hardware, sign, verify
CKM_DSA_SHA2240x00000013-512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_DSA_SHA2560x00000014-512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_DSA_SHA3840x00000015-512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_DSA_SHA5120x00000016-512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_ML_KEM new in 3.20x00000017800–1568 encapsulate, decapsulate--
CKM_DSA_SHA3_2240x00000018-512–1024 sign, verify-
CKM_DSA_SHA3_2560x00000019-512–1024 sign, verify-
CKM_DSA_SHA3_3840x0000001A-512–1024 sign, verify-
CKM_DSA_SHA3_5120x0000001B-512–1024 sign, verify-
CKM_ML_DSA_KEY_PAIR_GEN new in 3.20x0000001C1312–2592 generate_key_pair--
CKM_ML_DSA new in 3.20x0000001D1312–2592 sign, verify--
CKM_HASH_ML_DSA new in 3.20x0000001F1312–2592 sign, verify--
CKM_DH_PKCS_KEY_PAIR_GEN0x00000020512–8192 generate_key_pair512–10000 generate_key_pair512–4096 hardware, generate_key_pair
CKM_DH_PKCS_DERIVE0x00000021512–8192 derive, encapsulate, decapsulate512–10000 derive512–4096 hardware, derive
CKM_HASH_ML_DSA_SHA224 new in 3.20x000000231312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA256 new in 3.20x000000241312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA384 new in 3.20x000000251312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA512 new in 3.20x000000261312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA3_224 new in 3.20x000000271312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA3_256 new in 3.20x000000281312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA3_384 new in 3.20x000000291312–2592 sign, verify--
CKM_HASH_ML_DSA_SHA3_512 new in 3.20x0000002A1312–2592 sign, verify--
CKM_HASH_ML_DSA_SHAKE128 new in 3.20x0000002B1312–2592 sign, verify--
CKM_HASH_ML_DSA_SHAKE256 new in 3.20x0000002C1312–2592 sign, verify--
CKM_SLH_DSA_KEY_PAIR_GEN new in 3.20x0000002D---
CKM_SLH_DSA new in 3.20x0000002E---
CKM_X9_42_DH_KEY_PAIR_GEN0x00000030--1024–4096 hardware, generate_key_pair
CKM_X9_42_DH_DERIVE0x00000031--1024–4096 hardware, derive
CKM_X9_42_DH_HYBRID_DERIVE0x00000032---
CKM_X9_42_MQV_DERIVE0x00000033---
CKM_HASH_SLH_DSA new in 3.20x00000034---
CKM_HASH_SLH_DSA_SHA224 new in 3.20x00000036---
CKM_HASH_SLH_DSA_SHA256 new in 3.20x00000037---
CKM_HASH_SLH_DSA_SHA384 new in 3.20x00000038---
CKM_HASH_SLH_DSA_SHA512 new in 3.20x00000039---
CKM_HASH_SLH_DSA_SHA3_224 new in 3.20x0000003A---
CKM_HASH_SLH_DSA_SHA3_256 new in 3.20x0000003B---
CKM_HASH_SLH_DSA_SHA3_384 new in 3.20x0000003C---
CKM_HASH_SLH_DSA_SHA3_512 new in 3.20x0000003D---
CKM_HASH_SLH_DSA_SHAKE128 new in 3.20x0000003E---
CKM_HASH_SLH_DSA_SHAKE256 new in 3.20x0000003F---
CKM_SHA256_RSA_PKCS0x00000040512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA384_RSA_PKCS0x00000041512–16384 sign, verify512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA512_RSA_PKCS0x00000042512–16384 sign, verify512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA256_RSA_PKCS_PSS0x00000043512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA384_RSA_PKCS_PSS0x00000044512–16384 sign, verify512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA512_RSA_PKCS_PSS0x00000045512–16384 sign, verify512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA224_RSA_PKCS0x00000046512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA224_RSA_PKCS_PSS0x00000047512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA512_2240x00000048digest--
CKM_SHA512_224_HMAC0x00000049112–2048 sign, verify--
CKM_SHA512_224_HMAC_GENERAL0x0000004A112–2048 sign, verify--
CKM_SHA512_224_KEY_DERIVATION0x0000004B8–224 derive--
CKM_SHA512_2560x0000004Cdigest--
CKM_SHA512_256_HMAC0x0000004D128–2048 sign, verify--
CKM_SHA512_256_HMAC_GENERAL0x0000004E128–2048 sign, verify--
CKM_SHA512_256_KEY_DERIVATION0x0000004F8–256 derive--
CKM_SHA512_T0x00000050---
CKM_SHA512_T_HMAC0x00000051---
CKM_SHA512_T_HMAC_GENERAL0x00000052---
CKM_SHA512_T_KEY_DERIVATION0x00000053---
CKM_TLS12_EXTENDED_MASTER_KEY_DERIVE new in 3.20x00000056---
CKM_TLS12_EXTENDED_MASTER_KEY_DERIVE_DH new in 3.20x00000057---
CKM_SHA3_256_RSA_PKCS0x00000060512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA3_384_RSA_PKCS0x00000061512–16384 sign, verify512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA3_512_RSA_PKCS0x00000062512–16384 sign, verify512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA3_256_RSA_PKCS_PSS0x00000063512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA3_384_RSA_PKCS_PSS0x00000064512–16384 sign, verify512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA3_512_RSA_PKCS_PSS0x00000065512–16384 sign, verify512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA3_224_RSA_PKCS0x00000066512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA3_224_RSA_PKCS_PSS0x00000067512–16384 sign, verify512–16384 sign, verify512–4096 hardware, sign, verify
CKM_RC2_KEY_GEN0x00000100--1–128 hardware, generate
CKM_RC2_ECB0x00000101--1–128 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC2_CBC0x00000102--1–128 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC2_MAC0x00000103--1–128 hardware, sign, verify
CKM_RC2_MAC_GENERAL0x00000104--1–128 hardware, sign, verify
CKM_RC2_CBC_PAD0x00000105--1–128 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC4_KEY_GEN0x00000110--1–256 hardware, generate
CKM_RC40x00000111--1–256 hardware, encrypt, decrypt
CKM_DES_KEY_GEN0x000001208–8 generategenerate8–8 hardware, generate
CKM_DES_ECB0x000001218–8 encrypt, decrypt, wrap, unwrapencrypt, decrypt, wrap8–8 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES_CBC0x000001228–8 encrypt, decrypt, wrap, unwrapencrypt, decrypt, wrap8–8 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES_MAC0x00000123--8–8 hardware, sign, verify
CKM_DES_MAC_GENERAL0x00000124--8–8 hardware, sign, verify
CKM_DES_CBC_PAD0x000001258–8 encrypt, decrypt, wrap, unwrapencrypt, decrypt, wrap, unwrap8–8 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES2_KEY_GEN0x00000130-generate16–16 hardware, generate
CKM_DES3_KEY_GEN0x0000013124–24 generategenerate24–24 hardware, generate
CKM_DES3_ECB0x0000013224–24 encrypt, decrypt, wrap, unwrapencrypt, decrypt16–24 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES3_CBC0x0000013324–24 encrypt, decrypt, wrap, unwrapencrypt, decrypt, wrap16–24 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES3_MAC0x0000013416–24 sign, verify-16–24 hardware, sign, verify
CKM_DES3_MAC_GENERAL0x0000013516–24 sign, verify-16–24 hardware, sign, verify
CKM_DES3_CBC_PAD0x0000013624–24 encrypt, decrypt, wrap, unwrapencrypt, decrypt, wrap, unwrap16–24 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES3_CMAC_GENERAL0x0000013716–24 sign, verify-16–24 hardware, sign, verify
CKM_DES3_CMAC0x0000013816–24 sign, verifysign, verify16–24 hardware, sign, verify
CKM_CDMF_KEY_GEN0x00000140---
CKM_CDMF_ECB0x00000141---
CKM_CDMF_CBC0x00000142---
CKM_CDMF_MAC0x00000143---
CKM_CDMF_MAC_GENERAL0x00000144---
CKM_CDMF_CBC_PAD0x00000145---
CKM_DES_OFB640x0000015024–24 encrypt, decrypt, wrap, unwrap--
CKM_DES_OFB80x00000151---
CKM_DES_CFB640x0000015224–24 encrypt, decrypt, wrap, unwrap--
CKM_DES_CFB80x0000015324–24 encrypt, decrypt, wrap, unwrap--
CKM_MD20x00000200digest-hardware, digest
CKM_MD2_HMAC0x000002018–2048 sign, verify-hardware, sign, verify
CKM_MD2_HMAC_GENERAL0x000002028–2048 sign, verify-hardware, sign, verify
CKM_MD50x00000210digestdigesthardware, digest
CKM_MD5_HMAC0x000002118–2048 sign, verify16–512 sign, verifyhardware, sign, verify
CKM_MD5_HMAC_GENERAL0x000002128–2048 sign, verify-hardware, sign, verify
CKM_SHA_10x00000220digestdigesthardware, digest
CKM_SHA_1_HMAC0x0000022180–2048 sign, verify20–512 sign, verifyhardware, sign, verify
CKM_SHA_1_HMAC_GENERAL0x0000022280–2048 sign, verify-hardware, sign, verify
CKM_RIPEMD1280x00000230--hardware, digest
CKM_RIPEMD128_HMAC0x00000231--hardware, sign, verify
CKM_RIPEMD128_HMAC_GENERAL0x00000232--hardware, sign, verify
CKM_RIPEMD1600x00000240--hardware, digest
CKM_RIPEMD160_HMAC0x00000241--hardware, sign, verify
CKM_RIPEMD160_HMAC_GENERAL0x00000242--hardware, sign, verify
CKM_SHA2560x00000250digestdigesthardware, digest
CKM_SHA256_HMAC0x00000251128–2048 sign, verify32–512 sign, verifyhardware, sign, verify
CKM_SHA256_HMAC_GENERAL0x00000252128–2048 sign, verify-hardware, sign, verify
CKM_SHA2240x00000255digestdigesthardware, digest
CKM_SHA224_HMAC0x00000256112–2048 sign, verify28–512 sign, verifyhardware, sign, verify
CKM_SHA224_HMAC_GENERAL0x00000257112–2048 sign, verify-hardware, sign, verify
CKM_SHA3840x00000260digestdigesthardware, digest
CKM_SHA384_HMAC0x00000261192–2048 sign, verify48–512 sign, verifyhardware, sign, verify
CKM_SHA384_HMAC_GENERAL0x00000262192–2048 sign, verify-hardware, sign, verify
CKM_SHA5120x00000270digestdigesthardware, digest
CKM_SHA512_HMAC0x00000271256–2048 sign, verify64–512 sign, verifyhardware, sign, verify
CKM_SHA512_HMAC_GENERAL0x00000272256–2048 sign, verify-hardware, sign, verify
CKM_SECURID_KEY_GEN0x00000280---
CKM_SECURID0x00000282---
CKM_HOTP_KEY_GEN0x00000290---
CKM_HOTP0x00000291---
CKM_ACTI0x000002A0---
CKM_ACTI_KEY_GEN0x000002A1---
CKM_SHA3_2560x000002B0digestdigesthardware, digest
CKM_SHA3_256_HMAC0x000002B1128–2048 sign, verify32–512 sign, verifyhardware, sign, verify
CKM_SHA3_256_HMAC_GENERAL0x000002B2128–2048 sign, verify-hardware, sign, verify
CKM_SHA3_256_KEY_GEN0x000002B380–2048 generate--
CKM_SHA3_2240x000002B5digestdigesthardware, digest
CKM_SHA3_224_HMAC0x000002B6112–2048 sign, verify28–512 sign, verifyhardware, sign, verify
CKM_SHA3_224_HMAC_GENERAL0x000002B7112–2048 sign, verify-hardware, sign, verify
CKM_SHA3_224_KEY_GEN0x000002B880–2048 generate--
CKM_SHA3_3840x000002C0digestdigesthardware, digest
CKM_SHA3_384_HMAC0x000002C1192–2048 sign, verify48–512 sign, verifyhardware, sign, verify
CKM_SHA3_384_HMAC_GENERAL0x000002C2192–2048 sign, verify-hardware, sign, verify
CKM_SHA3_384_KEY_GEN0x000002C380–2048 generate--
CKM_SHA3_5120x000002D0digestdigesthardware, digest
CKM_SHA3_512_HMAC0x000002D1256–2048 sign, verify64–512 sign, verifyhardware, sign, verify
CKM_SHA3_512_HMAC_GENERAL0x000002D2256–2048 sign, verify-hardware, sign, verify
CKM_SHA3_512_KEY_GEN0x000002D380–2048 generate--
CKM_CAST_KEY_GEN0x00000300---
CKM_CAST_ECB0x00000301---
CKM_CAST_CBC0x00000302---
CKM_CAST_MAC0x00000303---
CKM_CAST_MAC_GENERAL0x00000304---
CKM_CAST_CBC_PAD0x00000305---
CKM_CAST3_KEY_GEN0x00000310---
CKM_CAST3_ECB0x00000311---
CKM_CAST3_CBC0x00000312---
CKM_CAST3_MAC0x00000313---
CKM_CAST3_MAC_GENERAL0x00000314---
CKM_CAST3_CBC_PAD0x00000315---
CKM_CAST5_KEY_GEN0x00000320--1–16 hardware, generate
CKM_CAST5_ECB0x00000321--1–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_CAST5_CBC0x00000322--1–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_CAST5_MAC0x00000323--1–16 hardware, sign, verify
CKM_CAST5_MAC_GENERAL0x00000324--1–16 hardware, sign, verify
CKM_CAST5_CBC_PAD0x00000325--1–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC5_KEY_GEN0x00000330---
CKM_RC5_ECB0x00000331---
CKM_RC5_CBC0x00000332---
CKM_RC5_MAC0x00000333---
CKM_RC5_MAC_GENERAL0x00000334---
CKM_RC5_CBC_PAD0x00000335---
CKM_IDEA_KEY_GEN0x00000340--16–16 hardware, generate
CKM_IDEA_ECB0x00000341--16–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_IDEA_CBC0x00000342--16–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_IDEA_MAC0x00000343--16–16 hardware, sign, verify
CKM_IDEA_MAC_GENERAL0x00000344--16–16 hardware, sign, verify
CKM_IDEA_CBC_PAD0x00000345--16–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_GENERIC_SECRET_KEY_GEN0x0000035080–2048 generate1–134217728 generatehardware, generate
CKM_CONCATENATE_BASE_AND_KEY0x00000360-1–512 derive-
CKM_CONCATENATE_BASE_AND_DATA0x00000362-1–512 derive-
CKM_CONCATENATE_DATA_AND_BASE0x00000363-1–512 derive-
CKM_XOR_BASE_AND_DATA0x00000364---
CKM_EXTRACT_KEY_FROM_KEY0x00000365---
CKM_SSL3_PRE_MASTER_KEY_GEN0x0000037048–48 generate-48–48 hardware, generate
CKM_SSL3_MASTER_KEY_DERIVE0x0000037148–48 derive-48–48 hardware, derive
CKM_SSL3_KEY_AND_MAC_DERIVE0x0000037248–48 derive-48–48 hardware, derive
CKM_SSL3_MASTER_KEY_DERIVE_DH0x00000373---
CKM_TLS_PRE_MASTER_KEY_GEN0x00000374---
CKM_TLS_MASTER_KEY_DERIVE0x00000375---
CKM_TLS_KEY_AND_MAC_DERIVE0x00000376---
CKM_TLS_MASTER_KEY_DERIVE_DH0x00000377---
CKM_TLS_PRF0x00000378---
CKM_SSL3_MD5_MAC0x00000380384–384 sign, verify-hardware, sign, verify
CKM_SSL3_SHA1_MAC0x00000381384–384 sign, verify-hardware, sign, verify
CKM_MD5_KEY_DERIVATION0x00000390--hardware, derive
CKM_MD2_KEY_DERIVATION0x00000391--hardware, derive
CKM_SHA1_KEY_DERIVATION0x000003928–160 derive-hardware, derive
CKM_SHA256_KEY_DERIVATION0x000003938–256 derive-hardware, derive
CKM_SHA384_KEY_DERIVATION0x000003948–384 derive-hardware, derive
CKM_SHA512_KEY_DERIVATION0x000003958–512 derive-hardware, derive
CKM_SHA224_KEY_DERIVATION0x000003968–224 derive-hardware, derive
CKM_SHA3_256_KEY_DERIVATION0x000003978–256 derive-hardware, derive
CKM_SHA3_224_KEY_DERIVATION0x000003988–224 derive-hardware, derive
CKM_SHA3_384_KEY_DERIVATION0x000003998–384 derive-hardware, derive
CKM_SHA3_512_KEY_DERIVATION0x0000039A8–512 derive-hardware, derive
CKM_SHAKE_128_KEY_DERIVATION0x0000039B8–2048 derive--
CKM_SHAKE_256_KEY_DERIVATION0x0000039C8–2048 derive--
CKM_PBE_MD2_DES_CBC0x000003A0--8–8 hardware, generate
CKM_PBE_MD5_DES_CBC0x000003A1--8–8 hardware, generate
CKM_PBE_MD5_CAST_CBC0x000003A2---
CKM_PBE_MD5_CAST3_CBC0x000003A3---
CKM_PBE_MD5_CAST5_CBC0x000003A4--16–16 hardware, generate
CKM_PBE_SHA1_CAST5_CBC0x000003A5--16–16 hardware, generate
CKM_PBE_SHA1_RC4_1280x000003A6--16–16 hardware, generate
CKM_PBE_SHA1_RC4_400x000003A7--5–5 hardware, generate
CKM_PBE_SHA1_DES3_EDE_CBC0x000003A8--24–24 hardware, generate
CKM_PBE_SHA1_DES2_EDE_CBC0x000003A9--16–16 hardware, generate
CKM_PBE_SHA1_RC2_128_CBC0x000003AA--16–16 hardware, generate
CKM_PBE_SHA1_RC2_40_CBC0x000003AB--5–5 hardware, generate
CKM_SP800_108_COUNTER_KDF0x000003AC---
CKM_SP800_108_FEEDBACK_KDF0x000003AD---
CKM_SP800_108_DOUBLE_PIPELINE_KDF0x000003AE---
CKM_PKCS5_PBKD20x000003B0---
CKM_PBA_SHA1_WITH_SHA1_HMAC0x000003C0--20–20 hardware, generate
CKM_WTLS_PRE_MASTER_KEY_GEN0x000003D0---
CKM_WTLS_MASTER_KEY_DERIVE0x000003D1---
CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC0x000003D2---
CKM_WTLS_PRF0x000003D3---
CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE0x000003D4---
CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE0x000003D5---
CKM_TLS10_MAC_SERVER0x000003D6---
CKM_TLS10_MAC_CLIENT0x000003D7---
CKM_TLS12_MAC0x000003D8---
CKM_TLS12_KDF0x000003D9---
CKM_TLS12_MASTER_KEY_DERIVE0x000003E0---
CKM_TLS12_KEY_AND_MAC_DERIVE0x000003E1---
CKM_TLS12_MASTER_KEY_DERIVE_DH0x000003E2---
CKM_TLS12_KEY_SAFE_DERIVE0x000003E3---
CKM_TLS_MAC0x000003E4---
CKM_TLS_KDF0x000003E5---
CKM_KEY_WRAP_LYNKS0x00000400---
CKM_KEY_WRAP_SET_OAEP0x00000401--512–4096 hardware, wrap, unwrap
CKM_CMS_SIG0x00000500---
CKM_KIP_DERIVE0x00000510---
CKM_KIP_WRAP0x00000511---
CKM_KIP_MAC0x00000512---
CKM_CAMELLIA_KEY_GEN0x00000550---
CKM_CAMELLIA_ECB0x00000551---
CKM_CAMELLIA_CBC0x00000552---
CKM_CAMELLIA_MAC0x00000553---
CKM_CAMELLIA_MAC_GENERAL0x00000554---
CKM_CAMELLIA_CBC_PAD0x00000555---
CKM_CAMELLIA_ECB_ENCRYPT_DATA0x00000556---
CKM_CAMELLIA_CBC_ENCRYPT_DATA0x00000557---
CKM_CAMELLIA_CTR0x00000558---
CKM_ARIA_KEY_GEN0x00000560--16–32 hardware, generate
CKM_ARIA_ECB0x00000561--16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_ARIA_CBC0x00000562--16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_ARIA_MAC0x00000563--16–32 hardware, sign, verify
CKM_ARIA_MAC_GENERAL0x00000564--16–32 hardware, sign, verify
CKM_ARIA_CBC_PAD0x00000565--16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_ARIA_ECB_ENCRYPT_DATA0x00000566---
CKM_ARIA_CBC_ENCRYPT_DATA0x00000567---
CKM_SEED_KEY_GEN0x00000650---
CKM_SEED_ECB0x00000651---
CKM_SEED_CBC0x00000652---
CKM_SEED_MAC0x00000653---
CKM_SEED_MAC_GENERAL0x00000654---
CKM_SEED_CBC_PAD0x00000655---
CKM_SEED_ECB_ENCRYPT_DATA0x00000656---
CKM_SEED_CBC_ENCRYPT_DATA0x00000657---
CKM_SKIPJACK_KEY_GEN0x00001000---
CKM_SKIPJACK_ECB640x00001001---
CKM_SKIPJACK_CBC640x00001002---
CKM_SKIPJACK_OFB640x00001003---
CKM_SKIPJACK_CFB640x00001004---
CKM_SKIPJACK_CFB320x00001005---
CKM_SKIPJACK_CFB160x00001006---
CKM_SKIPJACK_CFB80x00001007---
CKM_SKIPJACK_WRAP0x00001008---
CKM_SKIPJACK_PRIVATE_WRAP0x00001009---
CKM_SKIPJACK_RELAYX0x0000100A---
CKM_KEA_KEY_PAIR_GEN0x00001010---
CKM_KEA_KEY_DERIVE0x00001011---
CKM_KEA_DERIVE0x00001012---
CKM_FORTEZZA_TIMESTAMP0x00001020---
CKM_BATON_KEY_GEN0x00001030---
CKM_BATON_ECB1280x00001031---
CKM_BATON_ECB960x00001032---
CKM_BATON_CBC1280x00001033---
CKM_BATON_COUNTER0x00001034---
CKM_BATON_SHUFFLE0x00001035---
CKM_BATON_WRAP0x00001036---
CKM_ECDSA_KEY_PAIR_GEN0x00001040160–521 generate_key_pair, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 generate_key_pair, ec_f_p, ec_oid, ec_uncompress64–571 hardware, generate_key_pair, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA0x00001041160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA10x00001042160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA2240x00001043160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA2560x00001044160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA3840x00001045160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA5120x00001046160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA3_2240x00001047160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA3_2560x00001048160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA3_3840x00001049160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA3_5120x0000104A160–521 sign, verify, ec_oid, ec_f_p, ec_uncompress, ec_compress112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDH1_DERIVE0x00001050160–521 derive, ec_oid, ec_f_p, ec_uncompress, ec_compress, encapsulate, decapsulate112–521 derive64–571 hardware, derive, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDH1_COFACTOR_DERIVE0x00001051160–521 derive, ec_oid, ec_f_p, ec_uncompress, ec_compress, encapsulate, decapsulate--
CKM_ECMQV_DERIVE0x00001052---
CKM_ECDH_AES_KEY_WRAP0x00001053160–521 wrap, unwrap, ec_oid, ec_f_p, ec_uncompress, ec_compress--
CKM_RSA_AES_KEY_WRAP0x00001054512–16384 wrap, unwrap512–16384 wrap, unwrap-
CKM_EC_EDWARDS_KEY_PAIR_GEN0x00001055255–448 generate_key_pair, ec_oid, ec_f_p, ec_compress255–448 generate_key_pair64–571 generate_key_pair, ec_f_p, ec_oid, ec_uncompress
CKM_EC_MONTGOMERY_KEY_PAIR_GEN0x00001056255–448 generate_key_pair, ec_oid, ec_f_p, ec_compress-64–571 hardware, generate_key_pair, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_EDDSA0x00001057255–448 sign, verify, ec_oid, ec_f_p, ec_compress255–448 sign, verify64–571 sign, verify, ec_f_p, ec_oid, ec_uncompress
CKM_JUNIPER_KEY_GEN0x00001060---
CKM_JUNIPER_ECB1280x00001061---
CKM_JUNIPER_CBC1280x00001062---
CKM_JUNIPER_COUNTER0x00001063---
CKM_JUNIPER_SHUFFLE0x00001064---
CKM_JUNIPER_WRAP0x00001065---
CKM_FASTHASH0x00001070---
CKM_AES_XTS0x0000107132–64 encrypt, decrypt, wrap, unwrap--
CKM_AES_XTS_KEY_GEN0x0000107232–64 generate--
CKM_AES_KEY_GEN0x0000108016–32 generate16–32 generate16–32 hardware, generate
CKM_AES_ECB0x0000108116–32 encrypt, decrypt, wrap, unwrap16–32 encrypt, decrypt16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CBC0x0000108216–32 encrypt, decrypt, wrap, unwrap16–32 encrypt, decrypt, wrap, unwrap16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_MAC0x0000108316–32 sign, verify-16–32 hardware, sign, verify
CKM_AES_MAC_GENERAL0x0000108416–32 sign, verify-16–32 hardware, sign, verify
CKM_AES_CBC_PAD0x0000108516–32 encrypt, decrypt, wrap, unwrap16–32 encrypt, decrypt, wrap, unwrap16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CTR0x0000108616–32 encrypt, decrypt, wrap, unwrap16–32 encrypt, decrypt16–32 hardware, encrypt, decrypt
CKM_AES_GCM0x0000108716–32 encrypt, decrypt, wrap, unwrap16–32 encrypt, decrypt16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CCM0x00001088--16–32 hardware, encrypt, decrypt
CKM_AES_CTS0x00001089---
CKM_AES_CMAC0x0000108A16–32 sign, verify16–32 sign, verify16–32 hardware, sign, verify
CKM_AES_CMAC_GENERAL0x0000108B16–32 sign, verify-16–32 hardware, sign, verify
CKM_AES_XCBC_MAC0x0000108C---
CKM_AES_XCBC_MAC_960x0000108D---
CKM_AES_GMAC0x0000108E--16–32 hardware, sign, verify
CKM_BLOWFISH_KEY_GEN0x00001090--16–32 hardware, wrap, unwrap
CKM_BLOWFISH_CBC0x00001091--16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_TWOFISH_KEY_GEN0x00001092---
CKM_TWOFISH_CBC0x00001093---
CKM_BLOWFISH_CBC_PAD0x00001094---
CKM_TWOFISH_CBC_PAD0x00001095---
CKM_DES_ECB_ENCRYPT_DATA0x00001100-derive8–8 hardware, derive
CKM_DES_CBC_ENCRYPT_DATA0x00001101-derive8–8 hardware, derive
CKM_DES3_ECB_ENCRYPT_DATA0x00001102-derive16–24 hardware, derive
CKM_DES3_CBC_ENCRYPT_DATA0x00001103-derive16–24 hardware, derive
CKM_AES_ECB_ENCRYPT_DATA0x00001104-derive16–32 hardware, derive
CKM_AES_CBC_ENCRYPT_DATA0x00001105-derive16–32 hardware, derive
CKM_GOSTR3410_KEY_PAIR_GEN0x00001200---
CKM_GOSTR34100x00001201---
CKM_GOSTR3410_WITH_GOSTR34110x00001202---
CKM_GOSTR3410_KEY_WRAP0x00001203---
CKM_GOSTR3410_DERIVE0x00001204---
CKM_GOSTR34110x00001210---
CKM_GOSTR3411_HMAC0x00001211---
CKM_GOST28147_KEY_GEN0x00001220---
CKM_GOST28147_ECB0x00001221---
CKM_GOST281470x00001222---
CKM_GOST28147_MAC0x00001223---
CKM_GOST28147_KEY_WRAP0x00001224---
CKM_CHACHA20_KEY_GEN0x00001225---
CKM_CHACHA200x00001226---
CKM_POLY1305_KEY_GEN0x00001227---
CKM_POLY13050x00001228---
CKM_EC_KEY_PAIR_GEN_W_EXTRA_BITS0x0000140B---
CKM_DSA_PARAMETER_GEN0x00002000-512–1024 generate512–3072 hardware, generate
CKM_DH_PKCS_PARAMETER_GEN0x00002001-512–10000 generate512–4096 hardware, generate
CKM_X9_42_DH_PARAMETER_GEN0x00002002--1024–4096 hardware, generate
CKM_DSA_PROBABILISTIC_PARAMETER_GEN0x00002003---
CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN0x00002004---
CKM_DSA_FIPS_G_GEN0x00002005---
CKM_AES_OFB0x0000210416–32 encrypt, decrypt, wrap, unwrap-16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CFB640x00002105---
CKM_AES_CFB80x0000210616–32 encrypt, decrypt, wrap, unwrap--
CKM_AES_CFB1280x0000210716–32 encrypt, decrypt, wrap, unwrap--
CKM_AES_CFB10x00002108---
CKM_AES_KEY_WRAP0x0000210932–64 encrypt, decrypt, wrap, unwrap16–2147483648 wrap, unwrap16–32 hardware, wrap, unwrap
CKM_AES_KEY_WRAP_PAD0x0000210A32–64 encrypt, decrypt, wrap, unwrap1–2147483648 wrap, unwrap16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_KEY_WRAP_KWP0x0000210B32–64 encrypt, decrypt, wrap, unwrap--
CKM_AES_KEY_WRAP_PKCS70x0000210C32–64 encrypt, decrypt, wrap, unwrap--
CKM_RSA_PKCS_TPM_1_10x00004001---
CKM_RSA_PKCS_OAEP_TPM_1_10x00004002---
CKM_SHA_1_KEY_GEN0x0000400380–2048 generate--
CKM_SHA224_KEY_GEN0x0000400480–2048 generate--
CKM_SHA256_KEY_GEN0x0000400580–2048 generate--
CKM_SHA384_KEY_GEN0x0000400680–2048 generate--
CKM_SHA512_KEY_GEN0x0000400780–2048 generate--
CKM_SHA512_224_KEY_GEN0x0000400880–2048 generate--
CKM_SHA512_256_KEY_GEN0x0000400980–2048 generate--
CKM_SHA512_T_KEY_GEN0x0000400A---
CKM_NULL0x0000400B---
CKM_BLAKE2B_1600x0000400C---
CKM_BLAKE2B_160_HMAC0x0000400D---
CKM_BLAKE2B_160_HMAC_GENERAL0x0000400E---
CKM_BLAKE2B_160_KEY_DERIVE0x0000400F---
CKM_BLAKE2B_160_KEY_GEN0x00004010---
CKM_BLAKE2B_2560x00004011---
CKM_BLAKE2B_256_HMAC0x00004012---
CKM_BLAKE2B_256_HMAC_GENERAL0x00004013---
CKM_BLAKE2B_256_KEY_DERIVE0x00004014---
CKM_BLAKE2B_256_KEY_GEN0x00004015---
CKM_BLAKE2B_3840x00004016---
CKM_BLAKE2B_384_HMAC0x00004017---
CKM_BLAKE2B_384_HMAC_GENERAL0x00004018---
CKM_BLAKE2B_384_KEY_DERIVE0x00004019---
CKM_BLAKE2B_384_KEY_GEN0x0000401A---
CKM_BLAKE2B_5120x0000401B---
CKM_BLAKE2B_512_HMAC0x0000401C---
CKM_BLAKE2B_512_HMAC_GENERAL0x0000401D---
CKM_BLAKE2B_512_KEY_DERIVE0x0000401E---
CKM_BLAKE2B_512_KEY_GEN0x0000401F---
CKM_SALSA200x00004020---
CKM_CHACHA20_POLY13050x00004021---
CKM_SALSA20_POLY13050x00004022---
CKM_X3DH_INITIALIZE0x00004023---
CKM_X3DH_RESPOND0x00004024---
CKM_X2RATCHET_INITIALIZE0x00004025---
CKM_X2RATCHET_RESPOND0x00004026---
CKM_X2RATCHET_ENCRYPT0x00004027---
CKM_X2RATCHET_DECRYPT0x00004028---
CKM_XEDDSA0x00004029---
CKM_HKDF_DERIVE0x0000402A---
CKM_HKDF_DATA0x0000402B---
CKM_HKDF_KEY_GEN0x0000402C---
CKM_SALSA20_KEY_GEN0x0000402D---
CKM_IKE2_PRF_PLUS_DERIVE0x0000402E---
CKM_IKE_PRF_DERIVE0x0000402F---
CKM_IKE1_PRF_DERIVE0x00004030---
CKM_IKE1_EXTENDED_DERIVE0x00004031---
CKM_HSS_KEY_PAIR_GEN0x00004032---
CKM_HSS0x00004033---
CKM_XMSS_KEY_PAIR_GEN new in 3.20x00004034---
CKM_XMSSMT_KEY_PAIR_GEN new in 3.20x00004035---
CKM_XMSS new in 3.20x00004036---
CKM_XMSSMT new in 3.20x00004037---
CKM_ECDH_X_AES_KEY_WRAP new in 3.20x00004038255–448 wrap, unwrap, ec_oid, ec_f_p, ec_compress--
CKM_ECDH_COF_AES_KEY_WRAP new in 3.20x00004039160–521 wrap, unwrap, ec_oid, ec_f_p, ec_uncompress, ec_compress--
CKM_PUB_KEY_FROM_PRIV_KEY new in 3.20x0000403Aderive--
CKM_VENDOR_DEFINED0x80000000---

Above the range the specification names

115 vendor-range values, one row per library that exposes or documents each. A name appears where a public source gives one for the number, and key sizes and operations where a probe read them.

HexMechanismLibraryKeysOperations
0x80000013unnamedThales ProtectServer512–3072hardware, sign, verify
0x80000032unnamedThales ProtectServer1024–3072hardware, sign, verify
0x80000033unnamedThales ProtectServer1024–3072hardware, sign, verify
0x80000034unnamedThales ProtectServer1024–3072hardware, sign, verify
0x80000035unnamedThales ProtectServer1024–3072hardware, sign, verify
0x80000036unnamedThales ProtectServer1024–3072hardware, sign, verify
0x80000037unnamedThales ProtectServer1024–3072hardware, sign, verify
0x80000101unnamedThales ProtectServer1–128hardware, encrypt, decrypt, wrap, unwrap
0x80000121unnamedThales ProtectServer8–8hardware, encrypt, decrypt, wrap, unwrap
0x80000122unnamedThales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000123unnamedThales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000124unnamedThales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000125unnamedThales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000132unnamedThales ProtectServer16–24hardware, encrypt, decrypt, wrap, unwrap
0x80000134unnamedThales ProtectServer16–24hardware, sign, verify
0x80000135unnamedThales ProtectServer16–24hardware, sign, verify
0x80000150CKM_DES3_X919_MACThales Luna-documented, not observed
0x80000161unnamedThales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000170unnamedThales ProtectServer16–32hardware, wrap, unwrap
0x80000171unnamedThales ProtectServer16–32hardware, encrypt, decrypt, wrap, unwrap
0x80000172unnamedThales ProtectServer16–24hardware, encrypt, decrypt, wrap, unwrap
0x80000200unnamedThales ProtectServer-hardware, digest
0x80000204unnamedThales ProtectServer-hardware, digest
0x80000205unnamedThales ProtectServer-hardware, digest
0x80000321unnamedThales ProtectServer1–16hardware, encrypt, decrypt, wrap, unwrap
0x80000341unnamedThales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x8000038EunnamedThales ProtectServer8–8hardware, encrypt, decrypt, wrap, unwrap
0x8000038FunnamedThales ProtectServer16–24hardware, encrypt, decrypt, wrap, unwrap
0x80000400unnamedThales ProtectServer2048–4096hardware, generate_key_pair
0x80000411unnamedThales ProtectServer16–32hardware, unwrap
0x80000412unnamedThales ProtectServer16–32hardware, wrap
0x80000413unnamedThales ProtectServer16–32hardware, wrap
0x80000500unnamedThales ProtectServer8–8hardware, derive
0x80000501unnamedThales ProtectServer8–8hardware, derive
0x80000502unnamedThales ProtectServer16–24hardware, derive
0x80000503unnamedThales ProtectServer16–24hardware, derive
0x80000510unnamedThales ProtectServer16–24hardware, sign, verify
0x80000511unnamedThales ProtectServer16–16hardware, derive
0x80000512unnamedThales ProtectServer16–16hardware, sign
0x80000513unnamedThales ProtectServer16–32hardware, sign
0x80000514unnamedThales ProtectServer16–32hardware, derive
0x80000515unnamedThales ProtectServer-hardware, digest
0x80000600unnamedThales ProtectServer512–4096hardware, sign
0x80000611CKM_DES2_DUKPT_PINThales Luna-documented, not observed
0x80000612CKM_DES2_DUKPT_MACThales Luna-documented, not observed
0x80000613CKM_DES2_DUKPT_MAC_RESPThales Luna-documented, not observed
0x80000614CKM_DES2_DUKPT_DATAThales Luna-documented, not observed
0x80000615CKM_DES2_DUKPT_DATA_RESPThales Luna-documented, not observed
0x80000935unnamedThales ProtectServer-hardware, derive
0x80000940unnamedThales ProtectServer8–8hardware, encrypt, decrypt
0x80000941unnamedThales ProtectServer16–24hardware, encrypt, decrypt
0x80000950unnamedThales ProtectServer-hardware, wrap, unwrap
0x80000951unnamedThales ProtectServer-hardware, derive
0x80000952unnamedThales ProtectServer-hardware, derive
0x80000953unnamedThales ProtectServer-hardware, derive
0x80000954unnamedThales ProtectServer-hardware, wrap, unwrap
0x80000955unnamedThales ProtectServer-hardware, derive
0x80000961unnamedThales ProtectServer-hardware, wrap, unwrap
0x80000962unnamedThales ProtectServer-hardware, wrap, unwrap
0x80000963unnamedThales ProtectServer16–32hardware, wrap, unwrap
0x80000964unnamedThales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x80000965unnamedThales ProtectServer16–32hardware, wrap, unwrap
0x80000966unnamedThales ProtectServer16–32hardware, encrypt, decrypt
0x80000970unnamedThales ProtectServer16–32hardware, wrap, unwrap
0x80000971unnamedThales ProtectServer-hardware, wrap, unwrap
0x800009A0unnamedThales ProtectServer1–0generate
0x800009A1unnamedThales ProtectServer1–0generate
0x800009B0unnamedThales ProtectServer16–16hardware, sign, verify
0x800009C0unnamedThales ProtectServer-hardware, derive
0x800009D0unnamedThales ProtectServer16–16hardware, generate
0x800009D1unnamedThales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009D2unnamedThales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009D3unnamedThales ProtectServer16–16hardware, sign, verify
0x800009D4unnamedThales ProtectServer16–16hardware, sign, verify
0x800009D5unnamedThales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009D6unnamedThales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009E0unnamedThales ProtectServer2048–4096hardware, wrap, unwrap
0x800009F0unnamedThales ProtectServer-hardware, derive
0x800009F1unnamedThales ProtectServer-hardware, derive
0x800009F2unnamedThales ProtectServer-hardware, wrap, unwrap
0x800009F3unnamedThales ProtectServer-hardware, wrap, unwrap
0x80000A00unnamedThales ProtectServer64–571hardware, encrypt, decrypt, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000A10unnamedThales ProtectServer1024–4096hardware, extension
0x80000C09unnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0AunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0BunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0CunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0DunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000E00unnamedThales ProtectServer64–571hardware, derive, ec_f_p, ec_uncompress
0x80000E01unnamedThales ProtectServer64–571hardware, derive, ec_f_p, ec_uncompress
0x80001000unnamedThales ProtectServer521–521hardware, generate_key_pair
0x80001001unnamedThales ProtectServer521–521hardware, generate
0x80001002unnamedThales ProtectServer16–32hardware, derive
0x80001003unnamedThales ProtectServer16–32hardware, derive
0x80001004unnamedThales ProtectServer32–32hardware, encrypt, decrypt
0x80001C0AunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80001C0BunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80001C0CunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80001C0DunnamedThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80010001CKM_IBM_SHA3_224IBM opencryptoki-digest
0x80010002CKM_IBM_SHA3_256IBM opencryptoki-digest
0x80010003CKM_IBM_SHA3_384IBM opencryptoki-digest
0x80010004CKM_IBM_SHA3_512IBM opencryptoki-digest
0x80010023CKM_IBM_DILITHIUMIBM opencryptoki256–256generate_key_pair, sign, verify
0x80010025CKM_IBM_SHA3_224_HMACIBM opencryptoki112–2048sign, verify
0x80010026CKM_IBM_SHA3_256_HMACIBM opencryptoki128–2048sign, verify
0x80010027CKM_IBM_SHA3_384_HMACIBM opencryptoki192–2048sign, verify
0x80010028CKM_IBM_SHA3_512_HMACIBM opencryptoki256–2048sign, verify
0x80010035CKM_IBM_ML_DSA_KEY_PAIR_GENIBM opencryptoki1312–2592generate_key_pair
0x80010036CKM_IBM_ML_DSAIBM opencryptoki1312–2592sign, verify
0x80010037CKM_IBM_ML_KEM_KEY_PAIR_GENIBM opencryptoki800–1568generate_key_pair
0x80010038CKM_IBM_ML_KEMIBM opencryptoki800–1568derive
0x8001FF01CKM_IBM_ML_KEM_WITH_ECDHIBM opencryptoki800–1568derive
0xD9554204CKM_YUBICO_AES_CCM_WRAPYubiHSM 2-documented, not observed
0xD9554209CKM_YUBICO_RSA_WRAPYubiHSM 2-documented, not observed

Names and numbers from the OASIS header. Key sizes and flags from C_GetMechanismInfo on each library, read-only. A mechanism is listed under the first name the header gives its value, so a few aliases the header also defines are not shown.