Thales payShield 10K, Инструкция по установке и эксплуатации

Страница: 196 / 470

payShield 10K Installation and User Guide payShield 10K Installation and User Guide
© Thales Group Page 194
All Rights Reserved
Key Usage 2 A The required key usage for the key encrypted under the Key
Bock LMK. This information is included in the Key Block
header and should be determined using the Key Usage Table.
This field determines type of the operational key (e.g. RSA
private key, BDK, ZEK), and enforces key separation.
Mode of Use 1 A The required mode of use for the key encrypted under the Key
Bock LMK. This information is included in the Key Block
header, and should be determined using the Mode of Use
Table. This field determines how the operational key can be
used (e.g. encryption, decryption, MACing).
Key Version
Number 2 N A value from '00' to '99', for inclusion in the Key Block header.
Determined by the user. '00' denotes that key versioning is not
in use for this key.
Exportability 1A The required exportability for the key encrypted under the Key
Bock LMK. This information is included in the Key Block
header, and should be determined using the Exportability
Table. This field determines how the operational key can be
exported (e.g. no export allowed, may only be exported as a
Key Block).
Number of
Optional Blocks 2 N A value from '00' to '08', identifying how many optional data
blocks the user wants to add into the Key Block Header.
Optional data blocks are used to identify parameters (such as
key validity dates, key status, algorithm). For a value greater
than 0, the following three fields must be repeated for each
optional block.
Optional
Block
Identifier 2 A Note that the value 'PB' may not be used.
Optional
Block Length 2H The length in bytes of the optional block (including the
Identifier and Length). A value of X'04' indicates that the
block contains only the identifier and length, and so the
next field would not be present.
Optional
Data Block N A The payload of the optional data block.
End Message
Delimiter 1 C (As for Variant LMK

Variant LMK)
Message Trailer n A (As for Variant LMK

Variant LMK)
Field
Length &
Type Notes