The CCRYINI macro covers the following functions
initializing an encryption operation
initializing a decryption operation
initializing a message-digesting operation
continuing a multiple-part message-digesting operation by integrating the value of the secret key.
initializing a signature operation where the signature is an appendix of the data
initializing a signature operation where the data can be recovered from the signature
initializing a verification operation where the signature is an appendix of the data
initializing a signature verification operation where the data can be recovered from the signature
All functions are always performed synchronously.
A detailed description of the functions of the CCRYINI macro can be found in PKCS#11 V2.20: Cryptographic Token Interface Standard in the sections 11.8 through 11.12 under “C_EncryptInit”, “C_DecryptInit”, “C_DigestInit”, “C_DigestKey”, “C_SignInit”, “C_SignRecoverInit”, “C_VerifyInit” and “C_VerifyRecoverInit”.
Macro | Operands |
CCRYINI | MF=C / D / L / M / E ,ACTION=*ENCRYPTINIT / *DECRYPTINIT / *DIGESTINIT / *DIGESTKEY / *SIGNINIT / *SIGNRECOVERINIT / *VERIFYINIT / *VERIFYRECOVERINIT / <var: enum-of _action_set: 1> / default: _action_set.undefined ,SESSION=0..2147483647> / 0 ,MECHAN=<var: pointer> / NULL ,KEY=0..2147483647> / 0 |
ACTION
Type of action.
The corresponding PKCS#11 function is specified for each action code.
=*ENCRYPTINIT
corresponds to the PKCS#11 function C_EncryptInit;
initializes an encryption operation.
=*DECRYPTINIT
corresponds to the PKCS#11 function C_DecryptInit;
initializes an decryption operation.
=*DIGESTINIT
corresponds to the PKCS#11 function C_DigestInit;
initializes a message-digesting operation.
=*DIGESTKEY
corresponds to the PKCS#11 function C_DigestKey;
continues a multiple-part message-digesting operation by integrating the value of the secret key in data which has already been summarized.
=*SIGNINIT
corresponds to the PKCS#11 function C_SignInit;
initializes a signature operation where the signature is an appendix of the data.
=*SIGNRECOVERINIT
corresponds to the PKCS#11 function C_SignRecoverInit;
initializes a signature operation where the data can be recovered from the signature.
This function is not supported.
=*VERIFYINIT
corresponds to the PKCS#11 function C_VerifyInit;
initializes a verification operation where the signature is an appendix of the data
=*VERIFYRECOVERINIT
corresponds to the PKCS#11 function C_VerifyRecoverInit;
initializes a signature verification operation where the data can be recovered from the signature.
SESSION
Session identifier
MECHAN
Mechanism
KEY
Key handle
*DIGESTINIT: KEY is not used.