RE: [pkcs11] Groups - GMAC corrections and enhancements uploaded

[Gascon David <david.gascon@gemalto.com>]

I agree it doesn’t make a lot of sense, especially considering we don’t allow CKM_AES_CMAC to derive (according to 2.40).

 

If we did ever want to allow a GMAC/CMAC/HMAC based derivation we could define a separate mechanism much like CKM_SHAXXX_KEY_DERIVATION exists for the SHA based digest mechanisms.

 

If nobody has a counter opinion I’ll remove that check in an updated revision.

 

-Dave

 

From: Dieter Bong [mailto:Dieter.Bong@utimaco.com]
Sent: April-24-17 7:01 AM
To: Gascon David <david.gascon@gemalto.com>; pkcs11@lists.oasis-open.org
Subject: RE: [pkcs11] Groups - GMAC corrections and enhancements uploaded

 

David and all TC members,

 

While reviewing the GMAC proposal I noticed that table 60 allows CKM_AES_GMAC not only for functions “Sign & Verify” but also for function “Derive”. Does that make sense? CKM_AES_MAC, CKM_AES_CMAC and CKM_SHAnnn_HMAC are also not foreseen for key derivation. I suggest to remove the “√” symbol for the Derive function.

 

Thanks,

Dieter

 

From: pkcs11@lists.oasis-open.org [mailto:pkcs11@lists.oasis-open.org] On Behalf Of David Gascon
Sent: Freitag, 21. April 2017 17:10
To: pkcs11@lists.oasis-open.org
Subject: [pkcs11] Groups - GMAC corrections and enhancements uploaded

 

Document Name: GMAC corrections and enhancements

---

Description
This document contains corrections for GCM/GMAC:
- Changed ulIvLen from 1- 256 bytes to 1 - 16
- Changed references in the GMAC section of HMAC to GMAC
- Added CK_GMAC_PARAMS to allow users to specify IV and tag length
- Moved GMAC section to below GCM and CCM encryption sections
Download Latest Revision
Public Download Link

---

Submitter: Mr. David Gascon
Group: OASIS PKCS 11 TC
Folder: Documents
Date submitted: 2017-04-21 08:09:23

 

 

---

Utimaco IS GmbH
Germanusstr. 4, D.52080 Aachen, Germany, Tel: +49-241-1696-0, www.utimaco.com
Seat: Aachen – Registergericht Aachen HRB 18922
VAT ID No.: DE 815 496 496
Managementboard: Malte Pollmann (Chairman) CEO, Dr. Frank J. Nellissen CFO

This communication is confidential. We only send and receive email on the basis of the terms set out at https://www.utimaco.com/en/e-mail-disclaimer/

---

This message and any attachments are intended solely for the addressees and may contain confidential information. Any unauthorized use or disclosure, either whole or partial, is prohibited.
E-mails are susceptible to alteration. Our company shall not be liable for the message if altered, changed or falsified. If you are not the intended recipient of this message, please delete it and notify the sender.
Although all reasonable efforts have been made to keep this transmission free from viruses, the sender will not be liable for damages caused by a transmitted virus.