Re: [pkcs11] New Mechanisms subgroup Part 3 or 4, new AES

[mark powers <mark.powers@oracle.com>]

On 04/30/13 03:59 PM, Michael StJohns wrote:
> On 4/30/2013 5:19 PM, Robert Relyea wrote:
> > CKM_AES_XCBC_MAC_96
> > CKM_AES_XCBC_MAC_96 is a special case used with IPsec. 128-bit result 
> > truncated to 96 bits. 
>
> Why wouldn't you just truncate the result after its returned from PKCS11?

Because you might want to pass a pointer to a 96-bit field in a packet 
to PKCS11 without
worrying that other fields will be clobbered. You could pass a 128-bit 
buffer
and copy 96 bits into the packet, but that's not as elegant.

> Mike
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that 
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php