CKM_EC_MONTGOMERY_KEY_PAIR_GEN
This section provides a summary of CKM_EC_MONTGOMERY_KEY_PAIR_GEN.
Note
This mechanism is only available if you are using PTK 7.2.0 or newer with ProtectServer 3 HSM Firmware 7.02.00 or newer.
Supported Operations
Operation | Supported |
---|---|
Encrypt and Decrypt | No |
Sign and Verify | No |
SignRecover and VerifyRecover | No |
Digest | No |
Generate Key/Key-Pair | Yes |
Wrap and Unwrap | No |
Derive | No |
FIPS Mode support
Available in FIPS Mode | Restrictions in FIPS Mode |
---|---|
Yes | None |
Key Size Range (bits) and Parameters
Key Size Minimum/Maximum | Value |
---|---|
Minimum | 64 |
FIPS Minimum | 224 |
Maximum | 571 |
Parameter
None
Mechanism Description
The elliptic curve key pair generation mechanism, denoted CKM_EC_MONTGOMERY_KEY_PAIR_GEN
, is a key pair generation mechanism for EC Operation.
This mechanism operates identically to CKM_EC_KEY_PAIR_GEN
, with the following differences:
-
It only accepts named Montgomery curves, such as curve25519 and curve448.
-
It generates a
CKK_EC_MONTGOMERY
key type.
For information about the operation of CKM_EC_KEY_PAIR_GEN
, see CKM_EC_KEY_PAIR_GEN.
Return to ProtectToolkit-C mechanisms.