IBM 2 Computer Hardware User Manual


 
Digital_Signature_Generate CCA Release 2.54
Digital_Signature_Generate (CSNDDSG)
Platform/
Product
OS/2 AIX Win NT/
2000
OS/400
IBM 4758-2/23 X X X X
The Digital_Signature_Generate verb is used to generate a digital signature.
You specify:
The RSA private key
For X9.31, the hash formatting method
The hash value
The address where the verb returns the digital signature.
The hash quantity may be created through use of the One_Way_Hash or the
MDC_Generate verbs.
Restrictions
A private key flagged as a key-management-only key (in private-key-section
offset 50) is not usable in this verb. See page 3-14 and page 3-7.
Not all IBM implementations of this verb may support an optimized form of the
RSA private key, however, the IBM 4758 product family implementation of this
verb does support an optimized RSA private key (“Chinese Remainder” form).
Not all CCA implementations support each formatting method.
The modulus-length (key-length) of a key used with ANSI X9.31 digital
signatures must be one of 1024, 1280, 1536, 1792, or 2048 bits.
Format
CSNDDSG
return_code Output Integer
reason_code Output Integer
exit_data_length In/Output Integer
exit_data In/Output String exit_data_length bytes
rule_array_count Input Integer zero, one, or two
rule_array Input String array rule_array_count * 8 bytes
PKA_private_key_identifier_length Input Integer
PKA_private_key_identifier Input String PKA_private_key_identifier_length
bytes
hash_length Input Integer
hash Input String hash_length bytes
signature_field_length In/Output Integer
signature_bit_length Output Integer
signature_field Output String signature_field_length bytes
Parameters
For the definitions of the return_code, reason_code, exit_data_length, and exit_data
parameters, see “Parameters Common to All Verbs” on page 1-11.
rule_array_count
The rule_array_count parameter is a pointer to an integer variable containing
the number of elements in the rule_array variable. The value must be zero,
one, or two.
4-4 IBM 4758 CCA Basic Services, Release 2.54, February 2005