Combining key control information in common cryptographic architecture services

摘要

A system includes a processor configured to perform a method, the method comprising receiving a first key token, second key token and a request to combine the first key token with the second key token, identifying a key type of the first key token and a key type of the second key token, determining whether the key type of the first key token may be combined with the key type of the second key token, combining the first key token with the second key token to create a third key token responsive to determining that the key type of the first key token may be combined with the key type of the second key token, and outputting the third key token.

主权项

1. A system comprising:
a memory having computer readable instructions; and a hardware security module processor configured to execute the computer readable instructions, the computer readable instructions comprising: receiving a first key token, second key token and a request to combine the first key token with the second key token; determining whether the first key token and the second key token are valid common cryptographic architecture (CCA) tokens for a particular encryption algorithm; determining whether the first key token and the second key token contain keys of the particular encryption algorithm, the particular encryption algorithm keys having a desired number of bytes; identifying a key type of the first key token and a key type of the second key token based on determining that the first key token and the second key token are valid CCA tokens for the particular encryption algorithm and that the first key token and the second key token contain the particular encryption algorithm keys having the desired number of bytes; determining whether the key type of the first key token is configured to be combined with the key type of the second key token; combining the first key token with the second key token to create a third key token responsive to determining that the key type of the first key token is configured to be combined with the key type of the second key token; and outputting the third key token.