Reference Guide

30 Chapter 4: Changes Between MES 4.3.1 and 4.4
RSA BSAFE Micro Edition Suite 4.4 Migration Guide
Wrap the Key Data
The following table lists the functions used to wrap the key data in MES 4.4 .
For more information about key wrapping in
MES 4.4, see the RSA BSAFE Micro
Edition Suite Developers Guide
.
RSA Signature Generation and Verification using SHA-512/256
The NIST testing tool for RSA signature generation and verification using SHA-512/
256 included an incorrect algorithm identifier.
ANSI X9.31 RSA signature and verification using the SHA512/256 digest is updated
in MES 4.4 to use the correct identifier. Signature verification is also updated to
include a test for the old identifier to ensure signatures generated using previous
versions of MES can still be verified. However, signatures generated using MES 4.4
will not verify correctly on systems using the old implementation.
Table 7 Key Wrapping Functions
MES 4.3.1 MES 4.4
R_CR_keywrap_wrap()
R_CR_keywrap_unwrap()
If wrapping:
• A symmetric key,
R_CR_keywrap_wrap_SKEY()
• An asymmetric key,
R_CR_keywrap_wrap_PKEY()
• Raw key data,
R_CR_keywrap_wrap()
If unwrapping:
• A symmetric key,
R_CR_keywrap_unwrap_SKEY()
• An asymmetric key,
R_CR_keywrap_unwrap_PKEY()
• Raw key data,
R_CR_keywrap_unwrap()