Intel EP80579 Benutzerhandbuch

Seite von 76
Security Software—Intel
®
 QuickAssist Technology Cryptographic API Architecture Overview
Intel
®
 EP80579 Software for Security Applications on Intel
®
 QuickAssist Technology
PG
August 2009
20
Order Number: 320183-004US
4.0
Intel
®
 QuickAssist Technology Cryptographic API 
Architecture Overview
4.1
What’s New in this Chapter 
No updates in this release. 
4.2
Feature List 
The Intel
®
 QuickAssist Technology Cryptographic API comprises two broad feature 
areas in its API, they are the symmetric operations API and the public key cryptography 
API.
4.2.1
Symmetric Operations
4.2.1.1
Cipher
EP80579 security software supports the following Cipher algorithms:
• AES (128-bit/192-bit/256-bit key size) in ECB, CBC and CTR modes. Block size for 
data is 16 byte blocks.
• 3DES (192-bit key size) in ECB and CBC and CTR mode. Block size for data is 
8 bytes.
• DES (64-bit key size) in ECB and CBC mode. Block size for data is 8 bytes.
• ARC4 (stream cipher)
• NULL cipher with a minimum block size of 8 bytes
4.2.1.2
Hash/Authentication
EP80579 security software supports the following Hash/Authentication algorithms:
• Secure Hash Algorithm SHA-1, SHA-224/256/384/512.
• Authentication algorithms for Secure Hash supported HMAC-SHA-1, HMAC-SHA-
224/256/384/512
• Message Digest 5 (MD5) and HMAC-MD5
• Advanced Encryption Standard (AES) using 96-bit key in AES-XCBC mode to 
produce AES-XCBC-MAC-96.
4.2.1.3
Partial Packets for Cipher and Hash/Authentication Commands
A partial packet is defined as a portion of a full packet. The caller issues a separate 
request for each portion (partial packet) of the full packet. The size of data sent must 
be a multiple of the underlying algorithm block size for cipher and hash requests except 
for the final hash partial packet in which padding will be applied if it is not a block size. 
The final result following completion of all the portions is equivalent to the case where