Fwd: Re: [pkcs11] Preliminary draft proposal of PKCS #11 AEAD API

Hi,

The attached file is a preliminary draft of proposed PKCS #11 AEAD
functions, based on my meeting with Bob Relyea this Monday.

It adds six new functions for performing authenticated encryption and
decryption.
* C_AEADEncryptInit
* C_AEADEncrypt
* C_AEADEncryptFinal
* C_AEADDecryptInit
* C_AEADDecrypt
* C_AEADDecryptFinal

Between the Init and Final calls, C_AEADEncrypt or C_AEADDecrypt can
be called repeatedly to encrypt or decrypt multiple messages using the
same key.

Only single-part operations are supported. Bob Relyea and I are
opposed to authenticated decryption functions that output
unauthenticated plaintext. Multi-part authenticated decryption
functions need to output unauthenticated plaintext unless the crypto
module buffers it internally.

I specified the CKM_AEAD_AES_GCM mechanism and its parameters as an
example. I also specified two mechanisms for a crypto module to
generate the GCM nonces during authenticated encryption, a la NIST
SP-800-38D Sec. 8.2.

Wan-Teh Chang