Struct cryptoki::mechanism::MechanismType

source ·

pub struct MechanismType { /* private fields */ }

Expand description

Type of a mechanism

Implementations§

source §

impl MechanismType

source

pub const AES_KEY_GEN: MechanismType = _

AES key generation mechanism

source

pub const AES_CBC: MechanismType = _

AES-CBC mechanism

For encryption, the message length must be a multiple of the block size. For wrapping, the mechanism encrypts the value of the key, padded on the trailing end with up to block size minus one null bytes. For unwrapping, the result is truncated according to the key type and the length provided by the template.

source

pub const AES_CBC_PAD: MechanismType = _

AES-CBC with PKCS#7 padding mechanism

The plaintext may be any size. The PKCS#7 padding allows the length of the plaintext to be recovered from the ciphertext. Therefore no length should be provided when unwrapping keys with this mechanism.

source

pub const AES_ECB: MechanismType = _

AES-ECB mechanism

source

pub const AES_KEY_WRAP: MechanismType = _

AES key wrap mechanism. This mechanism can only wrap a key or encrypt a block of data whose length is a multiple of the AES Key Wrap algorithm block size.

source

pub const AES_KEY_WRAP_PAD: MechanismType = _

AES key wrap mechanism. This mechanism can wrap a key or encrypt a block of data of any length. It does the padding detailed in PKCS#7 of inputs.

source

pub const AES_GCM: MechanismType = _

AES-GCM mechanism

source

pub const RSA_PKCS_KEY_PAIR_GEN: MechanismType = _

PKCS #1 RSA key pair generation mechanism

source

pub const RSA_PKCS: MechanismType = _

Multi-purpose mechanism based on the RSA public-key cryptosystem and the block formats initially defined in PKCS #1 v1.5

source

pub const RSA_PKCS_PSS: MechanismType = _

Mechanism based on the RSA public-key cryptosystem and the PSS block format defined in PKCS #1

source

pub const RSA_PKCS_OAEP: MechanismType = _

Multi-purpose mechanism based on the RSA public-key cryptosystem and the OAEP block format defined in PKCS #1

source

pub const RSA_X_509: MechanismType = _

Multi-purpose mechanism based on the RSA public-key cryptosystem. This is so-called “raw” RSA, as assumed in X.509.

source

pub const DES_CBC: MechanismType = _

DES-CBC mechanism.

For encryption, the message length must be a multiple of the block size. For wrapping, the mechanism encrypts the value of the key, padded on the trailing end with up to block size minus one null bytes. For unwrapping, the result is truncated according to the key type and the length provided by the template.

source

pub const DES3_CBC: MechanismType = _

DES3-CBC mechanism.

For encryption, the message length must be a multiple of the block size. For wrapping, the mechanism encrypts the value of the key, padded on the trailing end with up to block size minus one null bytes. For unwrapping, the result is truncated according to the key type and the length provided by the template.

source

pub const DES_CBC_PAD: MechanismType = _

DES-CBC with PKCS#7 padding mechanism

The plaintext may be any size. The PKCS#7 padding allows the length of the plaintext to be recovered from the ciphertext. Therefore no length should be provided when unwrapping keys with this mechanism.

source

pub const DES3_CBC_PAD: MechanismType = _

DES3-CBC with PKCS#7 padding mechanism

The plaintext may be any size. The PKCS#7 padding allows the length of the plaintext to be recovered from the ciphertext. Therefore no length should be provided when unwrapping keys with this mechanism.

source

pub const DES_ECB: MechanismType = _

DES ECB Note that DES is deprecated. See https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf section 2, p. 6.

source

pub const DES3_ECB: MechanismType = _

DES3 ECB Note that DES3 is deprecated. See https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf section 2, p. 6.

source

pub const ECC_KEY_PAIR_GEN: MechanismType = _

EC key pair generation mechanism

source

pub const ECC_EDWARDS_KEY_PAIR_GEN: MechanismType = _

EC edwards key pair generation mechanism

source

pub const ECC_MONTGOMERY_KEY_PAIR_GEN: MechanismType = _

EC montgomery key pair generation mechanism

source

pub const EDDSA: MechanismType = _

EDDSA mechanism

Note: EdDSA is not part of the PKCS#11 v2.40 standard and as such may not be understood by the backend. It is included here because some vendor implementations support it through the v2.40 interface.

source