I agree it doesn’t make a lot of sense, especially considering we don’t allow CKM_AES_CMAC to derive (according to 2.40).
If we did ever want to allow a GMAC/CMAC/HMAC based derivation we could define a separate mechanism much like CKM_SHAXXX_KEY_DERIVATION
exists for the SHA based digest mechanisms.
If nobody has a counter opinion I’ll remove that check in an updated revision.
-Dave
From: Dieter Bong [mailto:]
Sent: April-24-17 7:01 AM
To: Gascon David <>;
Subject: RE: [pkcs11] Groups - GMAC corrections and enhancements uploaded
David and all TC members,
While reviewing the GMAC proposal I noticed that table 60 allows CKM_AES_GMAC not only for functions “Sign & Verify” but also for function
“Derive”. Does that make sense? CKM_AES_MAC, CKM_AES_CMAC and CKM_SHAnnn_HMAC are also not foreseen for key derivation. I suggest to remove the “√” symbol for the Derive function.
Thanks,
Dieter
From:
[mailto:]
On Behalf Of David Gascon
Sent: Freitag, 21. April 2017 17:10
To:
Subject: [pkcs11] Groups - GMAC corrections and enhancements uploaded
Document Name:
GMAC corrections and enhancements
Description
This document contains corrections for GCM/GMAC:
- Changed ulIvLen from 1- 256 bytes to 1 - 16
- Changed references in the GMAC section of HMAC to GMAC
- Added CK_GMAC_PARAMS to allow users to specify IV and tag length
- Moved GMAC section to below GCM and CCM encryption sections
Download Latest
Revision
Public Download Link
Submitter: Mr. David Gascon
Group: OASIS PKCS 11 TC
Folder: Documents
Date submitted: 2017-04-21 08:09:23
Utimaco IS GmbH
Germanusstr. 4, D.52080 Aachen, Germany, Tel: +49-241-1696-0,
www.utimaco.com
Seat: Aachen – Registergericht Aachen HRB 18922
VAT ID No.: DE 815 496 496
Managementboard: Malte Pollmann (Chairman) CEO, Dr. Frank J. Nellissen CFO
This communication is confidential. We only send and receive email on the basis of the terms set out at
https://www.utimaco.com/en/e-mail-disclaimer/
This message and any attachments are intended solely for the addressees and may contain confidential information. Any unauthorized
use or disclosure, either whole or partial, is prohibited.
E-mails are susceptible to alteration. Our company shall not be liable for the message if altered, changed or falsified. If you are not the intended recipient of this message, please delete it and notify the sender.
Although all reasonable efforts have been made to keep this transmission free from viruses, the sender will not be liable for damages caused by a transmitted virus.
