808bits

PKCS#11 mechanisms by value

464 mechanisms in PKCS#11 v3.2 · 37 new in 3.2 · 103 observed on SoftHSMv2 · 279 observed on Thales ProtectServer

A mechanism number in a log is only half a fact. The other half is whether the library in front of you exposes it, for which key sizes, and for which operations, and that half lives in C_GetMechanismInfo where most status tools never look. The columns on the right are what the probe read off each library, on the date and build named on its page. A dash means the library did not list it, which on a hardware token can be policy rather than capability.

Named by the specification

MechanismHexSoftHSMv2Thales ProtectServer
CKM_RSA_PKCS_KEY_PAIR_GEN0x00000000512–16384 generate_key_pair512–4096 hardware, generate_key_pair
CKM_RSA_PKCS0x00000001512–16384 encrypt, decrypt, sign, verify, wrap, unwrap512–4096 hardware, encrypt, decrypt, sign, sign_recover, verify, verify_recover, wrap, unwrap
CKM_RSA_97960x00000002-512–4096 hardware, sign, sign_recover, verify, verify_recover
CKM_RSA_X_5090x00000003512–16384 encrypt, decrypt, sign, verify512–4096 hardware, encrypt, decrypt, sign, sign_recover, verify, verify_recover, wrap, unwrap
CKM_MD2_RSA_PKCS0x00000004-512–4096 hardware, sign, verify
CKM_MD5_RSA_PKCS0x00000005512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA1_RSA_PKCS0x00000006512–16384 sign, verify512–4096 hardware, sign, verify
CKM_RIPEMD128_RSA_PKCS0x00000007-512–4096 hardware, sign, verify
CKM_RIPEMD160_RSA_PKCS0x00000008-512–4096 hardware, sign, verify
CKM_RSA_PKCS_OAEP0x00000009512–16384 encrypt, decrypt, wrap, unwrap512–4096 hardware, encrypt, decrypt, wrap, unwrap
CKM_RSA_X9_31_KEY_PAIR_GEN0x0000000A-1024–4096 hardware, generate_key_pair
CKM_RSA_X9_310x0000000B--
CKM_SHA1_RSA_X9_310x0000000C--
CKM_RSA_PKCS_PSS0x0000000D512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA1_RSA_PKCS_PSS0x0000000E512–16384 sign, verify512–4096 hardware, sign, verify
CKM_ML_KEM_KEY_PAIR_GEN new in 3.20x0000000F--
CKM_DSA_KEY_PAIR_GEN0x00000010512–1024 generate_key_pair512–3072 hardware, generate_key_pair
CKM_DSA0x00000011512–1024 sign, verify512–3072 hardware, sign, verify
CKM_DSA_SHA10x00000012512–1024 sign, verify512–3072 hardware, sign, verify
CKM_DSA_SHA2240x00000013512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_DSA_SHA2560x00000014512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_DSA_SHA3840x00000015512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_DSA_SHA5120x00000016512–1024 sign, verify1024–3072 hardware, sign, verify
CKM_ML_KEM new in 3.20x00000017--
CKM_DSA_SHA3_2240x00000018512–1024 sign, verify-
CKM_DSA_SHA3_2560x00000019512–1024 sign, verify-
CKM_DSA_SHA3_3840x0000001A512–1024 sign, verify-
CKM_DSA_SHA3_5120x0000001B512–1024 sign, verify-
CKM_ML_DSA_KEY_PAIR_GEN new in 3.20x0000001C--
CKM_ML_DSA new in 3.20x0000001D--
CKM_HASH_ML_DSA new in 3.20x0000001F--
CKM_DH_PKCS_KEY_PAIR_GEN0x00000020512–10000 generate_key_pair512–4096 hardware, generate_key_pair
CKM_DH_PKCS_DERIVE0x00000021512–10000 derive512–4096 hardware, derive
CKM_HASH_ML_DSA_SHA224 new in 3.20x00000023--
CKM_HASH_ML_DSA_SHA256 new in 3.20x00000024--
CKM_HASH_ML_DSA_SHA384 new in 3.20x00000025--
CKM_HASH_ML_DSA_SHA512 new in 3.20x00000026--
CKM_HASH_ML_DSA_SHA3_224 new in 3.20x00000027--
CKM_HASH_ML_DSA_SHA3_256 new in 3.20x00000028--
CKM_HASH_ML_DSA_SHA3_384 new in 3.20x00000029--
CKM_HASH_ML_DSA_SHA3_512 new in 3.20x0000002A--
CKM_HASH_ML_DSA_SHAKE128 new in 3.20x0000002B--
CKM_HASH_ML_DSA_SHAKE256 new in 3.20x0000002C--
CKM_SLH_DSA_KEY_PAIR_GEN new in 3.20x0000002D--
CKM_SLH_DSA new in 3.20x0000002E--
CKM_X9_42_DH_KEY_PAIR_GEN0x00000030-1024–4096 hardware, generate_key_pair
CKM_X9_42_DH_DERIVE0x00000031-1024–4096 hardware, derive
CKM_X9_42_DH_HYBRID_DERIVE0x00000032--
CKM_X9_42_MQV_DERIVE0x00000033--
CKM_HASH_SLH_DSA new in 3.20x00000034--
CKM_HASH_SLH_DSA_SHA224 new in 3.20x00000036--
CKM_HASH_SLH_DSA_SHA256 new in 3.20x00000037--
CKM_HASH_SLH_DSA_SHA384 new in 3.20x00000038--
CKM_HASH_SLH_DSA_SHA512 new in 3.20x00000039--
CKM_HASH_SLH_DSA_SHA3_224 new in 3.20x0000003A--
CKM_HASH_SLH_DSA_SHA3_256 new in 3.20x0000003B--
CKM_HASH_SLH_DSA_SHA3_384 new in 3.20x0000003C--
CKM_HASH_SLH_DSA_SHA3_512 new in 3.20x0000003D--
CKM_HASH_SLH_DSA_SHAKE128 new in 3.20x0000003E--
CKM_HASH_SLH_DSA_SHAKE256 new in 3.20x0000003F--
CKM_SHA256_RSA_PKCS0x00000040512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA384_RSA_PKCS0x00000041512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA512_RSA_PKCS0x00000042512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA256_RSA_PKCS_PSS0x00000043512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA384_RSA_PKCS_PSS0x00000044512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA512_RSA_PKCS_PSS0x00000045512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA224_RSA_PKCS0x00000046512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA224_RSA_PKCS_PSS0x00000047512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA512_2240x00000048--
CKM_SHA512_224_HMAC0x00000049--
CKM_SHA512_224_HMAC_GENERAL0x0000004A--
CKM_SHA512_224_KEY_DERIVATION0x0000004B--
CKM_SHA512_2560x0000004C--
CKM_SHA512_256_HMAC0x0000004D--
CKM_SHA512_256_HMAC_GENERAL0x0000004E--
CKM_SHA512_256_KEY_DERIVATION0x0000004F--
CKM_SHA512_T0x00000050--
CKM_SHA512_T_HMAC0x00000051--
CKM_SHA512_T_HMAC_GENERAL0x00000052--
CKM_SHA512_T_KEY_DERIVATION0x00000053--
CKM_TLS12_EXTENDED_MASTER_KEY_DERIVE new in 3.20x00000056--
CKM_TLS12_EXTENDED_MASTER_KEY_DERIVE_DH new in 3.20x00000057--
CKM_SHA3_256_RSA_PKCS0x00000060512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA3_384_RSA_PKCS0x00000061512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA3_512_RSA_PKCS0x00000062512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA3_256_RSA_PKCS_PSS0x00000063512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA3_384_RSA_PKCS_PSS0x00000064512–16384 sign, verify640–4096 hardware, sign, verify
CKM_SHA3_512_RSA_PKCS_PSS0x00000065512–16384 sign, verify768–4096 hardware, sign, verify
CKM_SHA3_224_RSA_PKCS0x00000066512–16384 sign, verify512–4096 hardware, sign, verify
CKM_SHA3_224_RSA_PKCS_PSS0x00000067512–16384 sign, verify512–4096 hardware, sign, verify
CKM_RC2_KEY_GEN0x00000100-1–128 hardware, generate
CKM_RC2_ECB0x00000101-1–128 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC2_CBC0x00000102-1–128 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC2_MAC0x00000103-1–128 hardware, sign, verify
CKM_RC2_MAC_GENERAL0x00000104-1–128 hardware, sign, verify
CKM_RC2_CBC_PAD0x00000105-1–128 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC4_KEY_GEN0x00000110-1–256 hardware, generate
CKM_RC40x00000111-1–256 hardware, encrypt, decrypt
CKM_DES_KEY_GEN0x00000120generate8–8 hardware, generate
CKM_DES_ECB0x00000121encrypt, decrypt, wrap8–8 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES_CBC0x00000122encrypt, decrypt, wrap8–8 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES_MAC0x00000123-8–8 hardware, sign, verify
CKM_DES_MAC_GENERAL0x00000124-8–8 hardware, sign, verify
CKM_DES_CBC_PAD0x00000125encrypt, decrypt, wrap, unwrap8–8 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES2_KEY_GEN0x00000130generate16–16 hardware, generate
CKM_DES3_KEY_GEN0x00000131generate24–24 hardware, generate
CKM_DES3_ECB0x00000132encrypt, decrypt16–24 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES3_CBC0x00000133encrypt, decrypt, wrap16–24 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES3_MAC0x00000134-16–24 hardware, sign, verify
CKM_DES3_MAC_GENERAL0x00000135-16–24 hardware, sign, verify
CKM_DES3_CBC_PAD0x00000136encrypt, decrypt, wrap, unwrap16–24 hardware, encrypt, decrypt, wrap, unwrap
CKM_DES3_CMAC_GENERAL0x00000137-16–24 hardware, sign, verify
CKM_DES3_CMAC0x00000138sign, verify16–24 hardware, sign, verify
CKM_CDMF_KEY_GEN0x00000140--
CKM_CDMF_ECB0x00000141--
CKM_CDMF_CBC0x00000142--
CKM_CDMF_MAC0x00000143--
CKM_CDMF_MAC_GENERAL0x00000144--
CKM_CDMF_CBC_PAD0x00000145--
CKM_DES_OFB640x00000150--
CKM_DES_OFB80x00000151--
CKM_DES_CFB640x00000152--
CKM_DES_CFB80x00000153--
CKM_MD20x00000200-hardware, digest
CKM_MD2_HMAC0x00000201-hardware, sign, verify
CKM_MD2_HMAC_GENERAL0x00000202-hardware, sign, verify
CKM_MD50x00000210digesthardware, digest
CKM_MD5_HMAC0x0000021116–512 sign, verifyhardware, sign, verify
CKM_MD5_HMAC_GENERAL0x00000212-hardware, sign, verify
CKM_SHA_10x00000220digesthardware, digest
CKM_SHA_1_HMAC0x0000022120–512 sign, verifyhardware, sign, verify
CKM_SHA_1_HMAC_GENERAL0x00000222-hardware, sign, verify
CKM_RIPEMD1280x00000230-hardware, digest
CKM_RIPEMD128_HMAC0x00000231-hardware, sign, verify
CKM_RIPEMD128_HMAC_GENERAL0x00000232-hardware, sign, verify
CKM_RIPEMD1600x00000240-hardware, digest
CKM_RIPEMD160_HMAC0x00000241-hardware, sign, verify
CKM_RIPEMD160_HMAC_GENERAL0x00000242-hardware, sign, verify
CKM_SHA2560x00000250digesthardware, digest
CKM_SHA256_HMAC0x0000025132–512 sign, verifyhardware, sign, verify
CKM_SHA256_HMAC_GENERAL0x00000252-hardware, sign, verify
CKM_SHA2240x00000255digesthardware, digest
CKM_SHA224_HMAC0x0000025628–512 sign, verifyhardware, sign, verify
CKM_SHA224_HMAC_GENERAL0x00000257-hardware, sign, verify
CKM_SHA3840x00000260digesthardware, digest
CKM_SHA384_HMAC0x0000026148–512 sign, verifyhardware, sign, verify
CKM_SHA384_HMAC_GENERAL0x00000262-hardware, sign, verify
CKM_SHA5120x00000270digesthardware, digest
CKM_SHA512_HMAC0x0000027164–512 sign, verifyhardware, sign, verify
CKM_SHA512_HMAC_GENERAL0x00000272-hardware, sign, verify
CKM_SECURID_KEY_GEN0x00000280--
CKM_SECURID0x00000282--
CKM_HOTP_KEY_GEN0x00000290--
CKM_HOTP0x00000291--
CKM_ACTI0x000002A0--
CKM_ACTI_KEY_GEN0x000002A1--
CKM_SHA3_2560x000002B0digesthardware, digest
CKM_SHA3_256_HMAC0x000002B132–512 sign, verifyhardware, sign, verify
CKM_SHA3_256_HMAC_GENERAL0x000002B2-hardware, sign, verify
CKM_SHA3_256_KEY_GEN0x000002B3--
CKM_SHA3_2240x000002B5digesthardware, digest
CKM_SHA3_224_HMAC0x000002B628–512 sign, verifyhardware, sign, verify
CKM_SHA3_224_HMAC_GENERAL0x000002B7-hardware, sign, verify
CKM_SHA3_224_KEY_GEN0x000002B8--
CKM_SHA3_3840x000002C0digesthardware, digest
CKM_SHA3_384_HMAC0x000002C148–512 sign, verifyhardware, sign, verify
CKM_SHA3_384_HMAC_GENERAL0x000002C2-hardware, sign, verify
CKM_SHA3_384_KEY_GEN0x000002C3--
CKM_SHA3_5120x000002D0digesthardware, digest
CKM_SHA3_512_HMAC0x000002D164–512 sign, verifyhardware, sign, verify
CKM_SHA3_512_HMAC_GENERAL0x000002D2-hardware, sign, verify
CKM_SHA3_512_KEY_GEN0x000002D3--
CKM_CAST_KEY_GEN0x00000300--
CKM_CAST_ECB0x00000301--
CKM_CAST_CBC0x00000302--
CKM_CAST_MAC0x00000303--
CKM_CAST_MAC_GENERAL0x00000304--
CKM_CAST_CBC_PAD0x00000305--
CKM_CAST3_KEY_GEN0x00000310--
CKM_CAST3_ECB0x00000311--
CKM_CAST3_CBC0x00000312--
CKM_CAST3_MAC0x00000313--
CKM_CAST3_MAC_GENERAL0x00000314--
CKM_CAST3_CBC_PAD0x00000315--
CKM_CAST5_KEY_GEN0x00000320-1–16 hardware, generate
CKM_CAST5_ECB0x00000321-1–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_CAST5_CBC0x00000322-1–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_CAST5_MAC0x00000323-1–16 hardware, sign, verify
CKM_CAST5_MAC_GENERAL0x00000324-1–16 hardware, sign, verify
CKM_CAST5_CBC_PAD0x00000325-1–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_RC5_KEY_GEN0x00000330--
CKM_RC5_ECB0x00000331--
CKM_RC5_CBC0x00000332--
CKM_RC5_MAC0x00000333--
CKM_RC5_MAC_GENERAL0x00000334--
CKM_RC5_CBC_PAD0x00000335--
CKM_IDEA_KEY_GEN0x00000340-16–16 hardware, generate
CKM_IDEA_ECB0x00000341-16–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_IDEA_CBC0x00000342-16–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_IDEA_MAC0x00000343-16–16 hardware, sign, verify
CKM_IDEA_MAC_GENERAL0x00000344-16–16 hardware, sign, verify
CKM_IDEA_CBC_PAD0x00000345-16–16 hardware, encrypt, decrypt, wrap, unwrap
CKM_GENERIC_SECRET_KEY_GEN0x000003501–134217728 generatehardware, generate
CKM_CONCATENATE_BASE_AND_KEY0x000003601–512 derive-
CKM_CONCATENATE_BASE_AND_DATA0x000003621–512 derive-
CKM_CONCATENATE_DATA_AND_BASE0x000003631–512 derive-
CKM_XOR_BASE_AND_DATA0x00000364--
CKM_EXTRACT_KEY_FROM_KEY0x00000365--
CKM_SSL3_PRE_MASTER_KEY_GEN0x00000370-48–48 hardware, generate
CKM_SSL3_MASTER_KEY_DERIVE0x00000371-48–48 hardware, derive
CKM_SSL3_KEY_AND_MAC_DERIVE0x00000372-48–48 hardware, derive
CKM_SSL3_MASTER_KEY_DERIVE_DH0x00000373--
CKM_TLS_PRE_MASTER_KEY_GEN0x00000374--
CKM_TLS_MASTER_KEY_DERIVE0x00000375--
CKM_TLS_KEY_AND_MAC_DERIVE0x00000376--
CKM_TLS_MASTER_KEY_DERIVE_DH0x00000377--
CKM_TLS_PRF0x00000378--
CKM_SSL3_MD5_MAC0x00000380-hardware, sign, verify
CKM_SSL3_SHA1_MAC0x00000381-hardware, sign, verify
CKM_MD5_KEY_DERIVATION0x00000390-hardware, derive
CKM_MD2_KEY_DERIVATION0x00000391-hardware, derive
CKM_SHA1_KEY_DERIVATION0x00000392-hardware, derive
CKM_SHA256_KEY_DERIVATION0x00000393-hardware, derive
CKM_SHA384_KEY_DERIVATION0x00000394-hardware, derive
CKM_SHA512_KEY_DERIVATION0x00000395-hardware, derive
CKM_SHA224_KEY_DERIVATION0x00000396-hardware, derive
CKM_SHA3_256_KEY_DERIVATION0x00000397-hardware, derive
CKM_SHA3_224_KEY_DERIVATION0x00000398-hardware, derive
CKM_SHA3_384_KEY_DERIVATION0x00000399-hardware, derive
CKM_SHA3_512_KEY_DERIVATION0x0000039A-hardware, derive
CKM_SHAKE_128_KEY_DERIVATION0x0000039B--
CKM_SHAKE_256_KEY_DERIVATION0x0000039C--
CKM_PBE_MD2_DES_CBC0x000003A0-8–8 hardware, generate
CKM_PBE_MD5_DES_CBC0x000003A1-8–8 hardware, generate
CKM_PBE_MD5_CAST_CBC0x000003A2--
CKM_PBE_MD5_CAST3_CBC0x000003A3--
CKM_PBE_MD5_CAST5_CBC0x000003A4-16–16 hardware, generate
CKM_PBE_SHA1_CAST5_CBC0x000003A5-16–16 hardware, generate
CKM_PBE_SHA1_RC4_1280x000003A6-16–16 hardware, generate
CKM_PBE_SHA1_RC4_400x000003A7-5–5 hardware, generate
CKM_PBE_SHA1_DES3_EDE_CBC0x000003A8-24–24 hardware, generate
CKM_PBE_SHA1_DES2_EDE_CBC0x000003A9-16–16 hardware, generate
CKM_PBE_SHA1_RC2_128_CBC0x000003AA-16–16 hardware, generate
CKM_PBE_SHA1_RC2_40_CBC0x000003AB-5–5 hardware, generate
CKM_SP800_108_COUNTER_KDF0x000003AC--
CKM_SP800_108_FEEDBACK_KDF0x000003AD--
CKM_SP800_108_DOUBLE_PIPELINE_KDF0x000003AE--
CKM_PKCS5_PBKD20x000003B0--
CKM_PBA_SHA1_WITH_SHA1_HMAC0x000003C0-20–20 hardware, generate
CKM_WTLS_PRE_MASTER_KEY_GEN0x000003D0--
CKM_WTLS_MASTER_KEY_DERIVE0x000003D1--
CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC0x000003D2--
CKM_WTLS_PRF0x000003D3--
CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE0x000003D4--
CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE0x000003D5--
CKM_TLS10_MAC_SERVER0x000003D6--
CKM_TLS10_MAC_CLIENT0x000003D7--
CKM_TLS12_MAC0x000003D8--
CKM_TLS12_KDF0x000003D9--
CKM_TLS12_MASTER_KEY_DERIVE0x000003E0--
CKM_TLS12_KEY_AND_MAC_DERIVE0x000003E1--
CKM_TLS12_MASTER_KEY_DERIVE_DH0x000003E2--
CKM_TLS12_KEY_SAFE_DERIVE0x000003E3--
CKM_TLS_MAC0x000003E4--
CKM_TLS_KDF0x000003E5--
CKM_KEY_WRAP_LYNKS0x00000400--
CKM_KEY_WRAP_SET_OAEP0x00000401-512–4096 hardware, wrap, unwrap
CKM_CMS_SIG0x00000500--
CKM_KIP_DERIVE0x00000510--
CKM_KIP_WRAP0x00000511--
CKM_KIP_MAC0x00000512--
CKM_CAMELLIA_KEY_GEN0x00000550--
CKM_CAMELLIA_ECB0x00000551--
CKM_CAMELLIA_CBC0x00000552--
CKM_CAMELLIA_MAC0x00000553--
CKM_CAMELLIA_MAC_GENERAL0x00000554--
CKM_CAMELLIA_CBC_PAD0x00000555--
CKM_CAMELLIA_ECB_ENCRYPT_DATA0x00000556--
CKM_CAMELLIA_CBC_ENCRYPT_DATA0x00000557--
CKM_CAMELLIA_CTR0x00000558--
CKM_ARIA_KEY_GEN0x00000560-16–32 hardware, generate
CKM_ARIA_ECB0x00000561-16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_ARIA_CBC0x00000562-16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_ARIA_MAC0x00000563-16–32 hardware, sign, verify
CKM_ARIA_MAC_GENERAL0x00000564-16–32 hardware, sign, verify
CKM_ARIA_CBC_PAD0x00000565-16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_ARIA_ECB_ENCRYPT_DATA0x00000566--
CKM_ARIA_CBC_ENCRYPT_DATA0x00000567--
CKM_SEED_KEY_GEN0x00000650--
CKM_SEED_ECB0x00000651--
CKM_SEED_CBC0x00000652--
CKM_SEED_MAC0x00000653--
CKM_SEED_MAC_GENERAL0x00000654--
CKM_SEED_CBC_PAD0x00000655--
CKM_SEED_ECB_ENCRYPT_DATA0x00000656--
CKM_SEED_CBC_ENCRYPT_DATA0x00000657--
CKM_SKIPJACK_KEY_GEN0x00001000--
CKM_SKIPJACK_ECB640x00001001--
CKM_SKIPJACK_CBC640x00001002--
CKM_SKIPJACK_OFB640x00001003--
CKM_SKIPJACK_CFB640x00001004--
CKM_SKIPJACK_CFB320x00001005--
CKM_SKIPJACK_CFB160x00001006--
CKM_SKIPJACK_CFB80x00001007--
CKM_SKIPJACK_WRAP0x00001008--
CKM_SKIPJACK_PRIVATE_WRAP0x00001009--
CKM_SKIPJACK_RELAYX0x0000100A--
CKM_KEA_KEY_PAIR_GEN0x00001010--
CKM_KEA_KEY_DERIVE0x00001011--
CKM_KEA_DERIVE0x00001012--
CKM_FORTEZZA_TIMESTAMP0x00001020--
CKM_BATON_KEY_GEN0x00001030--
CKM_BATON_ECB1280x00001031--
CKM_BATON_ECB960x00001032--
CKM_BATON_CBC1280x00001033--
CKM_BATON_COUNTER0x00001034--
CKM_BATON_SHUFFLE0x00001035--
CKM_BATON_WRAP0x00001036--
CKM_ECDSA_KEY_PAIR_GEN0x00001040112–521 generate_key_pair, ec_f_p, ec_oid, ec_uncompress64–571 hardware, generate_key_pair, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA0x00001041112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA10x00001042112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA2240x00001043112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA2560x00001044112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA3840x00001045112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA5120x00001046112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress-
CKM_ECDSA_SHA3_2240x00001047112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA3_2560x00001048112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA3_3840x00001049112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDSA_SHA3_5120x0000104A112–521 sign, verify, ec_f_p, ec_oid, ec_uncompress64–571 hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDH1_DERIVE0x00001050112–521 derive64–571 hardware, derive, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_ECDH1_COFACTOR_DERIVE0x00001051--
CKM_ECMQV_DERIVE0x00001052--
CKM_ECDH_AES_KEY_WRAP0x00001053--
CKM_RSA_AES_KEY_WRAP0x00001054512–16384 wrap, unwrap-
CKM_EC_EDWARDS_KEY_PAIR_GEN0x00001055255–448 generate_key_pair64–571 generate_key_pair, ec_f_p, ec_oid, ec_uncompress
CKM_EC_MONTGOMERY_KEY_PAIR_GEN0x00001056-64–571 hardware, generate_key_pair, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
CKM_EDDSA0x00001057255–448 sign, verify64–571 sign, verify, ec_f_p, ec_oid, ec_uncompress
CKM_JUNIPER_KEY_GEN0x00001060--
CKM_JUNIPER_ECB1280x00001061--
CKM_JUNIPER_CBC1280x00001062--
CKM_JUNIPER_COUNTER0x00001063--
CKM_JUNIPER_SHUFFLE0x00001064--
CKM_JUNIPER_WRAP0x00001065--
CKM_FASTHASH0x00001070--
CKM_AES_XTS0x00001071--
CKM_AES_XTS_KEY_GEN0x00001072--
CKM_AES_KEY_GEN0x0000108016–32 generate16–32 hardware, generate
CKM_AES_ECB0x0000108116–32 encrypt, decrypt16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CBC0x0000108216–32 encrypt, decrypt, wrap, unwrap16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_MAC0x00001083-16–32 hardware, sign, verify
CKM_AES_MAC_GENERAL0x00001084-16–32 hardware, sign, verify
CKM_AES_CBC_PAD0x0000108516–32 encrypt, decrypt, wrap, unwrap16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CTR0x0000108616–32 encrypt, decrypt16–32 hardware, encrypt, decrypt
CKM_AES_GCM0x0000108716–32 encrypt, decrypt16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CCM0x00001088-16–32 hardware, encrypt, decrypt
CKM_AES_CTS0x00001089--
CKM_AES_CMAC0x0000108A16–32 sign, verify16–32 hardware, sign, verify
CKM_AES_CMAC_GENERAL0x0000108B-16–32 hardware, sign, verify
CKM_AES_XCBC_MAC0x0000108C--
CKM_AES_XCBC_MAC_960x0000108D--
CKM_AES_GMAC0x0000108E-16–32 hardware, sign, verify
CKM_BLOWFISH_KEY_GEN0x00001090-16–32 hardware, wrap, unwrap
CKM_BLOWFISH_CBC0x00001091-16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_TWOFISH_KEY_GEN0x00001092--
CKM_TWOFISH_CBC0x00001093--
CKM_BLOWFISH_CBC_PAD0x00001094--
CKM_TWOFISH_CBC_PAD0x00001095--
CKM_DES_ECB_ENCRYPT_DATA0x00001100derive8–8 hardware, derive
CKM_DES_CBC_ENCRYPT_DATA0x00001101derive8–8 hardware, derive
CKM_DES3_ECB_ENCRYPT_DATA0x00001102derive16–24 hardware, derive
CKM_DES3_CBC_ENCRYPT_DATA0x00001103derive16–24 hardware, derive
CKM_AES_ECB_ENCRYPT_DATA0x00001104derive16–32 hardware, derive
CKM_AES_CBC_ENCRYPT_DATA0x00001105derive16–32 hardware, derive
CKM_GOSTR3410_KEY_PAIR_GEN0x00001200--
CKM_GOSTR34100x00001201--
CKM_GOSTR3410_WITH_GOSTR34110x00001202--
CKM_GOSTR3410_KEY_WRAP0x00001203--
CKM_GOSTR3410_DERIVE0x00001204--
CKM_GOSTR34110x00001210--
CKM_GOSTR3411_HMAC0x00001211--
CKM_GOST28147_KEY_GEN0x00001220--
CKM_GOST28147_ECB0x00001221--
CKM_GOST281470x00001222--
CKM_GOST28147_MAC0x00001223--
CKM_GOST28147_KEY_WRAP0x00001224--
CKM_CHACHA20_KEY_GEN0x00001225--
CKM_CHACHA200x00001226--
CKM_POLY1305_KEY_GEN0x00001227--
CKM_POLY13050x00001228--
CKM_EC_KEY_PAIR_GEN_W_EXTRA_BITS0x0000140B--
CKM_DSA_PARAMETER_GEN0x00002000512–1024 generate512–3072 hardware, generate
CKM_DH_PKCS_PARAMETER_GEN0x00002001512–10000 generate512–4096 hardware, generate
CKM_X9_42_DH_PARAMETER_GEN0x00002002-1024–4096 hardware, generate
CKM_DSA_PROBABILISTIC_PARAMETER_GEN0x00002003--
CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN0x00002004--
CKM_DSA_FIPS_G_GEN0x00002005--
CKM_AES_OFB0x00002104-16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_CFB640x00002105--
CKM_AES_CFB80x00002106--
CKM_AES_CFB1280x00002107--
CKM_AES_CFB10x00002108--
CKM_AES_KEY_WRAP0x0000210916–2147483648 wrap, unwrap16–32 hardware, wrap, unwrap
CKM_AES_KEY_WRAP_PAD0x0000210A1–2147483648 wrap, unwrap16–32 hardware, encrypt, decrypt, wrap, unwrap
CKM_AES_KEY_WRAP_KWP0x0000210B--
CKM_AES_KEY_WRAP_PKCS70x0000210C--
CKM_RSA_PKCS_TPM_1_10x00004001--
CKM_RSA_PKCS_OAEP_TPM_1_10x00004002--
CKM_SHA_1_KEY_GEN0x00004003--
CKM_SHA224_KEY_GEN0x00004004--
CKM_SHA256_KEY_GEN0x00004005--
CKM_SHA384_KEY_GEN0x00004006--
CKM_SHA512_KEY_GEN0x00004007--
CKM_SHA512_224_KEY_GEN0x00004008--
CKM_SHA512_256_KEY_GEN0x00004009--
CKM_SHA512_T_KEY_GEN0x0000400A--
CKM_NULL0x0000400B--
CKM_BLAKE2B_1600x0000400C--
CKM_BLAKE2B_160_HMAC0x0000400D--
CKM_BLAKE2B_160_HMAC_GENERAL0x0000400E--
CKM_BLAKE2B_160_KEY_DERIVE0x0000400F--
CKM_BLAKE2B_160_KEY_GEN0x00004010--
CKM_BLAKE2B_2560x00004011--
CKM_BLAKE2B_256_HMAC0x00004012--
CKM_BLAKE2B_256_HMAC_GENERAL0x00004013--
CKM_BLAKE2B_256_KEY_DERIVE0x00004014--
CKM_BLAKE2B_256_KEY_GEN0x00004015--
CKM_BLAKE2B_3840x00004016--
CKM_BLAKE2B_384_HMAC0x00004017--
CKM_BLAKE2B_384_HMAC_GENERAL0x00004018--
CKM_BLAKE2B_384_KEY_DERIVE0x00004019--
CKM_BLAKE2B_384_KEY_GEN0x0000401A--
CKM_BLAKE2B_5120x0000401B--
CKM_BLAKE2B_512_HMAC0x0000401C--
CKM_BLAKE2B_512_HMAC_GENERAL0x0000401D--
CKM_BLAKE2B_512_KEY_DERIVE0x0000401E--
CKM_BLAKE2B_512_KEY_GEN0x0000401F--
CKM_SALSA200x00004020--
CKM_CHACHA20_POLY13050x00004021--
CKM_SALSA20_POLY13050x00004022--
CKM_X3DH_INITIALIZE0x00004023--
CKM_X3DH_RESPOND0x00004024--
CKM_X2RATCHET_INITIALIZE0x00004025--
CKM_X2RATCHET_RESPOND0x00004026--
CKM_X2RATCHET_ENCRYPT0x00004027--
CKM_X2RATCHET_DECRYPT0x00004028--
CKM_XEDDSA0x00004029--
CKM_HKDF_DERIVE0x0000402A--
CKM_HKDF_DATA0x0000402B--
CKM_HKDF_KEY_GEN0x0000402C--
CKM_SALSA20_KEY_GEN0x0000402D--
CKM_IKE2_PRF_PLUS_DERIVE0x0000402E--
CKM_IKE_PRF_DERIVE0x0000402F--
CKM_IKE1_PRF_DERIVE0x00004030--
CKM_IKE1_EXTENDED_DERIVE0x00004031--
CKM_HSS_KEY_PAIR_GEN0x00004032--
CKM_HSS0x00004033--
CKM_XMSS_KEY_PAIR_GEN new in 3.20x00004034--
CKM_XMSSMT_KEY_PAIR_GEN new in 3.20x00004035--
CKM_XMSS new in 3.20x00004036--
CKM_XMSSMT new in 3.20x00004037--
CKM_ECDH_X_AES_KEY_WRAP new in 3.20x00004038--
CKM_ECDH_COF_AES_KEY_WRAP new in 3.20x00004039--
CKM_PUB_KEY_FROM_PRIV_KEY new in 3.20x0000403A--
CKM_VENDOR_DEFINED0x80000000--

Exposed but not named by the specification

93 vendor-range values that a library listed. The specification defines nothing here and the vendors do not publish the numbers, so the value and the flags are all that can be shown.

HexLibraryKeysOperations
0x80000013Thales ProtectServer512–3072hardware, sign, verify
0x80000032Thales ProtectServer1024–3072hardware, sign, verify
0x80000033Thales ProtectServer1024–3072hardware, sign, verify
0x80000034Thales ProtectServer1024–3072hardware, sign, verify
0x80000035Thales ProtectServer1024–3072hardware, sign, verify
0x80000036Thales ProtectServer1024–3072hardware, sign, verify
0x80000037Thales ProtectServer1024–3072hardware, sign, verify
0x80000101Thales ProtectServer1–128hardware, encrypt, decrypt, wrap, unwrap
0x80000121Thales ProtectServer8–8hardware, encrypt, decrypt, wrap, unwrap
0x80000122Thales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000123Thales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000124Thales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000125Thales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000132Thales ProtectServer16–24hardware, encrypt, decrypt, wrap, unwrap
0x80000134Thales ProtectServer16–24hardware, sign, verify
0x80000135Thales ProtectServer16–24hardware, sign, verify
0x80000161Thales ProtectServer64–571hardware, sign, verify, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000170Thales ProtectServer16–32hardware, wrap, unwrap
0x80000171Thales ProtectServer16–32hardware, encrypt, decrypt, wrap, unwrap
0x80000172Thales ProtectServer16–24hardware, encrypt, decrypt, wrap, unwrap
0x80000200Thales ProtectServer-hardware, digest
0x80000204Thales ProtectServer-hardware, digest
0x80000205Thales ProtectServer-hardware, digest
0x80000321Thales ProtectServer1–16hardware, encrypt, decrypt, wrap, unwrap
0x80000341Thales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x8000038EThales ProtectServer8–8hardware, encrypt, decrypt, wrap, unwrap
0x8000038FThales ProtectServer16–24hardware, encrypt, decrypt, wrap, unwrap
0x80000400Thales ProtectServer2048–4096hardware, generate_key_pair
0x80000411Thales ProtectServer16–32hardware, unwrap
0x80000412Thales ProtectServer16–32hardware, wrap
0x80000413Thales ProtectServer16–32hardware, wrap
0x80000500Thales ProtectServer8–8hardware, derive
0x80000501Thales ProtectServer8–8hardware, derive
0x80000502Thales ProtectServer16–24hardware, derive
0x80000503Thales ProtectServer16–24hardware, derive
0x80000510Thales ProtectServer16–24hardware, sign, verify
0x80000511Thales ProtectServer16–16hardware, derive
0x80000512Thales ProtectServer16–16hardware, sign
0x80000513Thales ProtectServer16–32hardware, sign
0x80000514Thales ProtectServer16–32hardware, derive
0x80000515Thales ProtectServer-hardware, digest
0x80000600Thales ProtectServer512–4096hardware, sign
0x80000935Thales ProtectServer-hardware, derive
0x80000940Thales ProtectServer8–8hardware, encrypt, decrypt
0x80000941Thales ProtectServer16–24hardware, encrypt, decrypt
0x80000950Thales ProtectServer-hardware, wrap, unwrap
0x80000951Thales ProtectServer-hardware, derive
0x80000952Thales ProtectServer-hardware, derive
0x80000953Thales ProtectServer-hardware, derive
0x80000954Thales ProtectServer-hardware, wrap, unwrap
0x80000955Thales ProtectServer-hardware, derive
0x80000961Thales ProtectServer-hardware, wrap, unwrap
0x80000962Thales ProtectServer-hardware, wrap, unwrap
0x80000963Thales ProtectServer16–32hardware, wrap, unwrap
0x80000964Thales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x80000965Thales ProtectServer16–32hardware, wrap, unwrap
0x80000966Thales ProtectServer16–32hardware, encrypt, decrypt
0x80000970Thales ProtectServer16–32hardware, wrap, unwrap
0x80000971Thales ProtectServer-hardware, wrap, unwrap
0x800009A0Thales ProtectServer1–0generate
0x800009A1Thales ProtectServer1–0generate
0x800009B0Thales ProtectServer16–16hardware, sign, verify
0x800009C0Thales ProtectServer-hardware, derive
0x800009D0Thales ProtectServer16–16hardware, generate
0x800009D1Thales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009D2Thales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009D3Thales ProtectServer16–16hardware, sign, verify
0x800009D4Thales ProtectServer16–16hardware, sign, verify
0x800009D5Thales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009D6Thales ProtectServer16–16hardware, encrypt, decrypt, wrap, unwrap
0x800009E0Thales ProtectServer2048–4096hardware, wrap, unwrap
0x800009F0Thales ProtectServer-hardware, derive
0x800009F1Thales ProtectServer-hardware, derive
0x800009F2Thales ProtectServer-hardware, wrap, unwrap
0x800009F3Thales ProtectServer-hardware, wrap, unwrap
0x80000A00Thales ProtectServer64–571hardware, encrypt, decrypt, ec_f_p, ec_f_2m, ec_oid, ec_uncompress
0x80000A10Thales ProtectServer1024–4096hardware, extension
0x80000C09Thales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0AThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0BThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0CThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000C0DThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80000E00Thales ProtectServer64–571hardware, derive, ec_f_p, ec_uncompress
0x80000E01Thales ProtectServer64–571hardware, derive, ec_f_p, ec_uncompress
0x80001000Thales ProtectServer521–521hardware, generate_key_pair
0x80001001Thales ProtectServer521–521hardware, generate
0x80001002Thales ProtectServer16–32hardware, derive
0x80001003Thales ProtectServer16–32hardware, derive
0x80001004Thales ProtectServer32–32hardware, encrypt, decrypt
0x80001C0AThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80001C0BThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80001C0CThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress
0x80001C0DThales ProtectServer64–571sign, verify, ec_f_p, ec_oid, ec_uncompress

Names and numbers from the OASIS header. Key sizes and flags from C_GetMechanismInfo on each library, read-only. A mechanism is listed under the first name the header gives its value, so a few aliases the header also defines are not shown.