198
edits
Security Policy: Difference between revisions
→Specification of Services
| Line 412: | Line 412: | ||
Each service is provided by a PKCS #11 function. The following table lists the defined services and correlates role, service type and type of access to security-relavant information. Access type is Read/Write/Zeroize. | Each service is provided by a PKCS #11 function. The following table lists the defined services and correlates role, service type and type of access to security-relavant information. Access type is Read/Write/Zeroize. | ||
<table border="1"> | <table style="width: 944px; height: 2066px;" border="1"> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td | <td | ||
style="text-align: center; vertical-align: middle; width: | style="text-align: center; vertical-align: middle; width: 101px;"> | ||
<p><font face="Palatino"><font size="2"><b>Service | <p><font face="Palatino"><font size="2"><b>Service | ||
Category</b></font></font></p> | Category</b></font></font></p> | ||
</td> | </td> | ||
<td | <td style="text-align: center; font-weight: bold;"><font | ||
face="Palatino"><font size="2"><b>Role</b></font></font></td> | |||
<td | <td | ||
style="text-align: center; vertical-align: middle; width: 155px;"> | style="text-align: center; vertical-align: middle; width: 155px;"> | ||
| Line 433: | Line 431: | ||
</td> | </td> | ||
<td | <td | ||
style="width: 116px; text-align: center; vertical-align: middle | style="width: 116px; font-weight: bold; text-align: center; vertical-align: middle;"> | ||
<p><font face="Palatino"><font size="2"><b>CSPs<br> | <p><font face="Palatino"><font size="2"><b>CSPs<br> | ||
Accessed</b></font></font></p> | Accessed</b></font></font></p> | ||
| Line 441: | Line 439: | ||
type,<br> | type,<br> | ||
e.g. | e.g. | ||
RWZ</b></font></font></p> | |||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;"> | ||
<p><font face="Palatino"><font size="2">FIPS | <p><font face="Palatino"><font size="2">FIPS | ||
140-2 specific</font></font></p> | 140-2 specific</font></font></p> | ||
</td> | </td> | ||
<td | <td></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetFunctionList</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetFunctionList</font></font></p> | ||
| Line 457: | Line 455: | ||
the list of FIPS 140-2 functions</font></font></p> | the list of FIPS 140-2 functions</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 463: | Line 461: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="3"> | ||
<p><font face="Palatino"><font size="2">Installation and<br> | <p><font face="Palatino"><font size="2">Installation | ||
and<br> | |||
Initialization</font></font></p> | |||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>Crypto Officer</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_</font></font><font | <p><font face="Palatino"><font size="2">FC_</font></font><font | ||
| Line 491: | Line 477: | ||
a token</font></font></p> | a token</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">all keys</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">Z</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>Crypto Officer</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_</font></font><font | <p><font face="Palatino"><font size="2">FC_</font></font><font | ||
| Line 505: | Line 492: | ||
the normal user's PIN</font></font></p> | the normal user's PIN</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">W</p> | <p align="center">W</p> | ||
| Line 511: | Line 498: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="3"> | ||
<p><font size="2"><font face="Palatino">General</font></font><br> | <p><font size="2"><font face="Palatino">General</font></font><br> | ||
<font size="2"><font face="Palatino">purpose</font></font></p> | <font size="2"><font face="Palatino">purpose</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Initialize</font></font></p> | <p><font face="Palatino"><font size="2">FC_Initialize</font></font></p> | ||
| Line 524: | Line 510: | ||
Cryptoki. This function provides the Power Up self-test service</font></font></p> | Cryptoki. This function provides the Power Up self-test service</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 530: | Line 516: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Finalize</font></font></p> | <p><font face="Palatino"><font size="2">FC_Finalize</font></font></p> | ||
| Line 537: | Line 524: | ||
Cryptoki</font></font></p> | Cryptoki</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">all keys</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">Z</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetInfo</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetInfo</font></font></p> | ||
| Line 550: | Line 538: | ||
general information about Cryptoki</font></font></p> | general information about Cryptoki</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 556: | Line 544: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="7"> | ||
<p><font size="2"><font face="Palatino">Slot | <p><font size="2"><font face="Palatino">Slot | ||
and</font></font><br> | and</font></font><br> | ||
| Line 562: | Line 550: | ||
<font size="2"><font face="Palatino">management</font></font></p> | <font size="2"><font face="Palatino">management</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetSlotList</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetSlotList</font></font></p> | ||
| Line 569: | Line 556: | ||
<td style="width: 321px;"> | <td style="width: 321px;"> | ||
<p><font face="Palatino"><font size="2">obtains | <p><font face="Palatino"><font size="2">obtains | ||
a list of slots in the system</font> | a list of slots in the system</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 577: | Line 564: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetSlotInfo</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetSlotInfo</font></font></p> | ||
| Line 584: | Line 572: | ||
information about a particular slot</font></font></p> | information about a particular slot</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 590: | Line 578: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetTokenInfo</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetTokenInfo</font></font></p> | ||
| Line 598: | Line 587: | ||
service</font></font></p> | service</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 604: | Line 593: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetMechansimList</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetMechansimList</font></font></p> | ||
| Line 611: | Line 601: | ||
a list of mechanisms supported by a token</font></font></p> | a list of mechanisms supported by a token</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 617: | Line 607: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetMechanismInfo</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetMechanismInfo</font></font></p> | ||
| Line 624: | Line 615: | ||
information about a particular mechanism</font></font></p> | information about a particular mechanism</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 630: | Line 621: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SetPIN</font></font></p> | <p><font face="Palatino"><font size="2">FC_SetPIN</font></font></p> | ||
| Line 650: | Line 631: | ||
the PIN of the current user</font></font></p> | the PIN of the current user</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">password</td> | ||
<td> | <td> | ||
<p align="center">RW</p> | <p align="center">RW</p> | ||
| Line 656: | Line 637: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="8"> | ||
<p><font face="Palatino"><font size="2">Session | <p><font face="Palatino"><font size="2">Session | ||
management</font></font></p> | |||
</td> | </td> | ||
<td | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_OpenSession</font></font></p> | <p><font face="Palatino"><font size="2">FC_OpenSession</font></font></p> | ||
| Line 669: | Line 649: | ||
a connection or "session" between an application and a particular token</font></font></p> | a connection or "session" between an application and a particular token</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 675: | Line 655: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_CloseSession</font></font></p> | <p><font face="Palatino"><font size="2">FC_CloseSession</font></font></p> | ||
| Line 682: | Line 663: | ||
a session</font></font></p> | a session</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">session's keys</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">Z</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_CloseAllSessions</font></font></p> | <p><font face="Palatino"><font size="2">FC_CloseAllSessions</font></font></p> | ||
| Line 695: | Line 677: | ||
all sessions with a token</font></font></p> | all sessions with a token</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">all session keys</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">Z</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetSessionInfo</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetSessionInfo</font></font></p> | ||
| Line 708: | Line 691: | ||
information about the session</font></font></p> | information about the session</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 714: | Line 697: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetOperationState</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetOperationState</font></font></p> | ||
| Line 721: | Line 705: | ||
the state of the cryptographic operation in a session</font></font></p> | the state of the cryptographic operation in a session</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 727: | Line 711: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SetOperationState</font></font></p> | <p><font face="Palatino"><font size="2">FC_SetOperationState</font></font></p> | ||
| Line 734: | Line 719: | ||
the state of the cryptographic operation in a session</font></font></p> | the state of the cryptographic operation in a session</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 740: | Line 725: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Login</font></font></p> | <p><font face="Palatino"><font size="2">FC_Login</font></font></p> | ||
| Line 747: | Line 733: | ||
into a token</font></font></p> | into a token</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">password</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 753: | Line 739: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Logout</font></font></p> | <p><font face="Palatino"><font size="2">FC_Logout</font></font></p> | ||
| Line 760: | Line 747: | ||
out from a token</font></font></p> | out from a token</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 766: | Line 753: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="9"> | ||
<p><font size="2"><font face="Palatino">Object</font></font><br> | <p><font size="2"><font face="Palatino">Object</font></font><br> | ||
<font size="2"><font face="Palatino">management | <font size="2"><font face="Palatino">management</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"><small>NSS User</small></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_CreateObject</font></font></p> | <p><font face="Palatino"><font size="2">FC_CreateObject</font></font></p> | ||
| Line 780: | Line 765: | ||
an object</font></font></p> | an object</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">key</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">W</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_CopyObject</font></font></p> | <p><font face="Palatino"><font size="2">FC_CopyObject</font></font></p> | ||
| Line 793: | Line 779: | ||
a copy of an object</font></font></p> | a copy of an object</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;">< | <td style="width: 116px;">original key<br> | ||
new key</td> | |||
< | <td style="text-align: center;"> R<br> | ||
W</td> | |||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DestroyObject</font></font></p> | <p><font face="Palatino"><font size="2">FC_DestroyObject</font></font></p> | ||
| Line 806: | Line 793: | ||
an object</font></font></p> | an object</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">key</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">Z</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetObjectSize</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetObjectSize</font></font></p> | ||
| Line 819: | Line 807: | ||
the size of an object in bytes</font></font></p> | the size of an object in bytes</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 825: | Line 813: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetAttributeValue</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetAttributeValue</font></font></p> | ||
| Line 832: | Line 821: | ||
an attribute value of an object</font></font></p> | an attribute value of an object</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 838: | Line 827: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SetAttributeValue</font></font></p> | <p><font face="Palatino"><font size="2">FC_SetAttributeValue</font></font></p> | ||
| Line 845: | Line 835: | ||
an attribute value of an object</font></font></p> | an attribute value of an object</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 851: | Line 841: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_FindObjectsInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_FindObjectsInit</font></font></p> | ||
| Line 858: | Line 849: | ||
an object search operation</font></font></p> | an object search operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 864: | Line 855: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_FindObjects</font></font></p> | <p><font face="Palatino"><font size="2">FC_FindObjects</font></font></p> | ||
| Line 871: | Line 863: | ||
an object search operation</font></font></p> | an object search operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 877: | Line 869: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_FindObjectsFinal</font></font></p> | <p><font face="Palatino"><font size="2">FC_FindObjectsFinal</font></font></p> | ||
| Line 884: | Line 877: | ||
an object search operation</font></font></p> | an object search operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 890: | Line 883: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="8"> | ||
<p><font size="2"><font face="Palatino">Encryption</font></font> | <p><font size="2"><font face="Palatino">Encryption</font></font> | ||
<font size="2"><font face="Palatino">and</font></font><br> | <font size="2"><font face="Palatino">and</font></font><br> | ||
<font size="2"><font face="Palatino">decryption | <font size="2"><font face="Palatino">decryption</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"><small>NSS User</small></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_EncryptInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_EncryptInit</font></font></p> | ||
| Line 904: | Line 896: | ||
an encryption operation</font></font></p> | an encryption operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">encryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 910: | Line 902: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Encrypt</font></font></p> | <p><font face="Palatino"><font size="2">FC_Encrypt</font></font></p> | ||
| Line 917: | Line 910: | ||
single-part data</font></font></p> | single-part data</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">encryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 923: | Line 916: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_EncryptUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_EncryptUpdate</font></font></p> | ||
| Line 930: | Line 924: | ||
a multiple-part encryption operation</font></font></p> | a multiple-part encryption operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">encryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 936: | Line 930: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_EncryptFinal</font></font></p> | <p><font face="Palatino"><font size="2">FC_EncryptFinal</font></font></p> | ||
| Line 943: | Line 938: | ||
a multiple-part encryption operation</font></font></p> | a multiple-part encryption operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">encryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 949: | Line 944: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DecryptInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_DecryptInit</font></font></p> | ||
| Line 956: | Line 952: | ||
a decryption operation</font></font></p> | a decryption operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">decryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 962: | Line 958: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Decrypt</font></font></p> | <p><font face="Palatino"><font size="2">FC_Decrypt</font></font></p> | ||
| Line 969: | Line 966: | ||
single-part encrypted data</font></font></p> | single-part encrypted data</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">decryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 975: | Line 972: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DecryptUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_DecryptUpdate</font></font></p> | ||
| Line 982: | Line 980: | ||
a multiple-part decryption operation</font></font></p> | a multiple-part decryption operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">decryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 988: | Line 986: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DecryptFinal</font></font></p> | <p><font face="Palatino"><font size="2">FC_DecryptFinal</font></font></p> | ||
| Line 995: | Line 994: | ||
a multiple-part decryption operation</font></font></p> | a multiple-part decryption operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">decryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,001: | Line 1,000: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="5"> | ||
<p><font size="2"><font face="Palatino">Message</font></font><br> | <p><font size="2"><font face="Palatino">Message</font></font><br> | ||
<font size="2"><font face="Palatino">digesting | <font size="2"><font face="Palatino">digesting</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DigestInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_DigestInit</font></font></p> | ||
| Line 1,015: | Line 1,012: | ||
a message-digesting operation</font></font></p> | a message-digesting operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,021: | Line 1,018: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Digest</font></font></p> | <p><font face="Palatino"><font size="2">FC_Digest</font></font></p> | ||
| Line 1,028: | Line 1,026: | ||
single-part data</font></font></p> | single-part data</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,034: | Line 1,032: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DigestUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_DigestUpdate</font></font></p> | ||
| Line 1,041: | Line 1,040: | ||
a multiple-part digesting operation</font></font></p> | a multiple-part digesting operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,047: | Line 1,046: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DigestKey</font></font></p> | <p><font face="Palatino"><font size="2">FC_DigestKey</font></font></p> | ||
| Line 1,055: | Line 1,055: | ||
secret key as part of the data already digested</font></font></p> | secret key as part of the data already digested</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;"><br> | ||
key</td> | |||
<td> | <td> | ||
<p align="center"></p> | |||
<p align="center">R</p> | <p align="center">R</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DigestFinal</font></font></p> | <p><font face="Palatino"><font size="2">FC_DigestFinal</font></font></p> | ||
| Line 1,068: | Line 1,071: | ||
a multiple-part digesting operation</font></font></p> | a multiple-part digesting operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,074: | Line 1,077: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="12"> | ||
<p><font size="2"><font face="Palatino">Signature</font></font> | <p><font size="2"><font face="Palatino">Signature</font></font> | ||
<font size="2"><font face="Palatino">and</font></font><br> | <font size="2"><font face="Palatino">and</font></font><br> | ||
| Line 1,080: | Line 1,083: | ||
<font size="2"><font face="Palatino">(private)</font></font></p> | <font size="2"><font face="Palatino">(private)</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"><small>NSS User</small></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SignInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_SignInit</font></font></p> | ||
| Line 1,089: | Line 1,091: | ||
a signature operation</font></font></p> | a signature operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signing or HMAC key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,095: | Line 1,097: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Sign</font></font></p> | <p><font face="Palatino"><font size="2">FC_Sign</font></font></p> | ||
| Line 1,102: | Line 1,105: | ||
single-part data</font></font></p> | single-part data</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signing or HMAC key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,108: | Line 1,111: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SignUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_SignUpdate</font></font></p> | ||
| Line 1,115: | Line 1,119: | ||
a multiple-part signature operation</font></font></p> | a multiple-part signature operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signing or HMAC key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,121: | Line 1,125: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SignFinal</font></font></p> | <p><font face="Palatino"><font size="2">FC_SignFinal</font></font></p> | ||
| Line 1,128: | Line 1,133: | ||
a multiple-part signature operation</font></font></p> | a multiple-part signature operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signing or HMAC key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,134: | Line 1,139: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SignRecoverInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_SignRecoverInit</font></font></p> | ||
| Line 1,142: | Line 1,148: | ||
signature</font></font></p> | signature</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">RSA signing key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,148: | Line 1,154: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SignRecover</font></font></p> | <p><font face="Palatino"><font size="2">FC_SignRecover</font></font></p> | ||
| Line 1,155: | Line 1,162: | ||
single-part data, where the data can be recovered from the signature</font></font></p> | single-part data, where the data can be recovered from the signature</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">RSA signing key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,161: | Line 1,168: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_VerifyInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_VerifyInit</font></font></p> | ||
| Line 1,168: | Line 1,176: | ||
a verification operation</font></font></p> | a verification operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signature verification key | ||
or<br> | |||
HMAC key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,174: | Line 1,184: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_Verify</font></font></p> | <p><font face="Palatino"><font size="2">FC_Verify</font></font></p> | ||
| Line 1,181: | Line 1,192: | ||
a signature on single-part data</font></font></p> | a signature on single-part data</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signature verification key | ||
or<br> | |||
HMAC key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,187: | Line 1,200: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_VerifyUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_VerifyUpdate</font></font></p> | ||
| Line 1,194: | Line 1,208: | ||
a multiple-part verification operation</font></font></p> | a multiple-part verification operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signature verification key | ||
or<br> | |||
HMAC key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,200: | Line 1,216: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_VerifyFinal</font></font></p> | <p><font face="Palatino"><font size="2">FC_VerifyFinal</font></font></p> | ||
| Line 1,207: | Line 1,224: | ||
a multiple-part verification operation</font></font></p> | a multiple-part verification operation</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signature verification key | ||
or<br> | |||
HMAC key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,213: | Line 1,232: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_VerifyRecoverInit</font></font></p> | <p><font face="Palatino"><font size="2">FC_VerifyRecoverInit</font></font></p> | ||
| Line 1,220: | Line 1,240: | ||
a verification operation where the data is recovered from the signature</font></font></p> | a verification operation where the data is recovered from the signature</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">RSA signature verification | ||
key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,226: | Line 1,247: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_VerifyRecover</font></font></p> | <p><font face="Palatino"><font size="2">FC_VerifyRecover</font></font></p> | ||
| Line 1,234: | Line 1,256: | ||
signature</font></font></p> | signature</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">RSA signature verification | ||
key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,240: | Line 1,263: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="4"> | ||
<p><font size="2"><font face="Palatino">Dual-function</font></font><br> | <p><font size="2"><font face="Palatino">Dual-function</font></font><br> | ||
<font size="2"><font face="Palatino">cryptographic</font></font><br> | <font size="2"><font face="Palatino">cryptographic</font></font><br> | ||
<font size="2"><font face="Palatino">operations</font></font></p> | <font size="2"><font face="Palatino">operations</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"><small>NSS User</small></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DigestEncryptUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_DigestEncryptUpdate</font></font></p> | ||
| Line 1,255: | Line 1,277: | ||
</p> | </p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">encryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,261: | Line 1,283: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DecryptDigestUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_DecryptDigestUpdate</font></font></p> | ||
| Line 1,269: | Line 1,292: | ||
</p> | </p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">decryption key</td> | ||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,275: | Line 1,298: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SignEncryptUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_SignEncryptUpdate</font></font></p> | ||
| Line 1,283: | Line 1,307: | ||
</p> | </p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signing or HMAC key and | ||
encryption key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,289: | Line 1,314: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DecryptVerifyUpdate</font></font></p> | <p><font face="Palatino"><font size="2">FC_DecryptVerifyUpdate</font></font></p> | ||
| Line 1,297: | Line 1,323: | ||
</p> | </p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">signature verification or | ||
HMAC key and decryption key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
| Line 1,303: | Line 1,330: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="5"> | ||
<p><font size="2"><font face="Palatino">Key</font></font><br> | <p><font size="2"><font face="Palatino">Key</font></font><br> | ||
<font size="2"><font face="Palatino">management</font></font><br> | <font size="2"><font face="Palatino">management</font></font><br> | ||
<font size="2"><font face="Palatino">(private)</font></font></p> | <font size="2"><font face="Palatino">(private)</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"><small>NSS User</small></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GenerateKey</font></font></p> | <p><font face="Palatino"><font size="2">FC_GenerateKey</font></font></p> | ||
| Line 1,317: | Line 1,343: | ||
a secret key</font></font></p> | a secret key</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">key</td> | ||
<td> | <td> | ||
<p align="center">W</p> | <p align="center">W</p> | ||
| Line 1,323: | Line 1,349: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GenerateKeyPair</font></font></p> | <p><font face="Palatino"><font size="2">FC_GenerateKeyPair</font></font></p> | ||
| Line 1,330: | Line 1,357: | ||
a public-key/private-key pair</font></font></p> | a public-key/private-key pair</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">key pair</td> | ||
<td> | <td> | ||
<p align="center">W</p> | <p align="center">W</p> | ||
| Line 1,336: | Line 1,363: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_WrapKey</font></font></p> | <p><font face="Palatino"><font size="2">FC_WrapKey</font></font></p> | ||
| Line 1,343: | Line 1,371: | ||
(encrypts) a key</font></font></p> | (encrypts) a key</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">wrapping key<br> | ||
wrapped key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | <p align="center">R</p> | ||
<p align="center">W</p> | |||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_UnwrapKey</font></font></p> | <p><font face="Palatino"><font size="2">FC_UnwrapKey</font></font></p> | ||
| Line 1,356: | Line 1,387: | ||
(decrypts) a key</font></font></p> | (decrypts) a key</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">unwrapping key<br> | ||
unwrapped key</td> | |||
<td> | <td> | ||
<p align="center">R</p> | |||
<p align="center">W</p> | <p align="center">W</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"><small>NSS User</small></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_DeriveKey</font></font></p> | <p><font face="Palatino"><font size="2">FC_DeriveKey</font></font></p> | ||
| Line 1,369: | Line 1,403: | ||
a key from a base key</font></font></p> | a key from a base key</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">base key<br> | ||
derived key</td> | |||
<td> | <td> | ||
<p align="center"> | <p align="center">R</p> | ||
<p align="center">W</p> | |||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="2"> | ||
<p><font size="2"><font face="Palatino">Random | <p><font size="2"><font face="Palatino">Random | ||
number</font></font><br> | number</font></font><br> | ||
| Line 1,381: | Line 1,417: | ||
<font size="2"><font face="Palatino">(public)</font></font></p> | <font size="2"><font face="Palatino">(public)</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_SeedRandom</font></font></p> | <p><font face="Palatino"><font size="2">FC_SeedRandom</font></font></p> | ||
| Line 1,390: | Line 1,425: | ||
in additional seed material to the random number generator</font></font></p> | in additional seed material to the random number generator</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">RNG seed key</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">RW</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GenerateRandom</font></font></p> | <p><font face="Palatino"><font size="2">FC_GenerateRandom</font></font></p> | ||
| Line 1,403: | Line 1,439: | ||
random data. Performs continuous random number generator test</font></font></p> | random data. Performs continuous random number generator test</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">RNG seed key</td> | ||
<td> | <td> | ||
<p align="center"> | <p align="center">RW</p> | ||
</td> | </td> | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;" rowspan="2"> | ||
<p><font face="Palatino"><font size="2">Function</font></font></p> | <p><font face="Palatino"><font size="2">Function</font></font></p> | ||
<p><font face="Palatino"><font size="2">management</font></font></p> | <p><font face="Palatino"><font size="2">management</font></font></p> | ||
</td> | </td> | ||
<td | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_GetFunctionStatus</font></font></p> | <p><font face="Palatino"><font size="2">FC_GetFunctionStatus</font></font></p> | ||
| Line 1,422: | Line 1,457: | ||
updated status of a function running in parallel with the application</font></font></p> | updated status of a function running in parallel with the application</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 1,428: | Line 1,463: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: 91px;"></td> | |||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">FC_CancelFunction</font></font></p> | <p><font face="Palatino"><font size="2">FC_CancelFunction</font></font></p> | ||
| Line 1,435: | Line 1,471: | ||
a function running in parallel with the application</font></font></p> | a function running in parallel with the application</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||
| Line 1,441: | Line 1,477: | ||
</tr> | </tr> | ||
<tr valign="top"> | <tr valign="top"> | ||
<td style="width: | <td style="width: 101px;"> | ||
<p><font face="Palatino"><font size="2">Callbacks</font></font></p> | <p><font face="Palatino"><font size="2">Callbacks</font></font></p> | ||
</td> | </td> | ||
<td style=" | <td style="width: 91px;"></td> | ||
<td style="width: 155px;"> | <td style="width: 155px;"> | ||
<p><font face="Palatino"><font size="2">Notify</font></font></p> | <p><font face="Palatino"><font size="2">Notify</font></font></p> | ||
| Line 1,452: | Line 1,488: | ||
notifications from Cryptoki</font></font></p> | notifications from Cryptoki</font></font></p> | ||
</td> | </td> | ||
<td style="width: 116px;"></td> | <td style="width: 116px;">none</td> | ||
<td> | <td> | ||
<p align="center">-</p> | <p align="center">-</p> | ||