CKM_SHA3_256_HMAC

TIP   Some mechanisms in this collection have both a "general" variant and a similarly named variant without "general" in the name. Per the PKCS#11 specification the _GENERAL variant of mechanism accepts a mechanism parameter that is used to define the length of the signature that is returned. The length can typically be any value between 1 and the length of the underlying HASH algorithm.

The variants without _GENERAL do not accept any mechanism parameters and always return a fixed length signature; where the length is defined by the underlying HASH algorithm.

Firmware 7.8.1 and Newer Summary

Luna HSM Firmware 7.8.1 and newer supports zero-byte input to HMAC functions.

FIPS approved? Yes
Supported functions Sign | Verify
Functions restricted from FIPS use None
Minimum key length (bits) 64
Minimum key length for FIPS use (bits) 128
Minimum legacy key length for FIPS use (bits) 128
Maximum key length (bits) 4096
Block size 136
Digest size 32
Key types Symmetric
Algorithms SHA3_256
Modes HMAC
Flags Extractable | Allow zero-length input

NOTE   Using Luna HSM Firmware 7.8.4 and newer, this mechanism is blocked from using a DES3 key for signing in FIPS approved configuration (HSM policy 12: Allow non-FIPS algorithms set to OFF).

Firmware 7.7.0 and Newer Summary

FIPS approved? Yes
Supported functions Sign | Verify
Functions restricted from FIPS use None
Minimum key length (bits) 64
Minimum key length for FIPS use (bits) 128
Minimum legacy key length for FIPS use (bits) 128
Maximum key length (bits) 4096
Block size 136
Digest size 32
Key types Symmetric
Algorithms SHA3_256
Modes HMAC
Flags Extractable

Firmware 7.4.2 Summary

FIPS approved? No
Supported functions Sign | Verify
Minimum key length (bits) 64
Minimum key length for FIPS use (bits) N/A
Minimum legacy key length for FIPS use (bits) N/A
Maximum key length (bits) 4096
Block size 136
Digest size 32
Key types Symmetric
Algorithms SHA3_256
Modes HMAC
Flags Extractable