Parameters

For the definitions of the return_code, reason_code, exit_data_length, and exit_data parameters, see Parameters common to all verbs.

key_type

Direction:	Input
Type:	String

The parameter is an 8-byte field that contains either a key type value or the keyword TOKEN. The keyword is left-aligned and padded on the right with blanks.

If the key type is TOKEN, CCA determines the key type from the control vector (CV) field in the internal key token provided in the source_key_identifier parameter.

Key type values for the Key Export verb are:

CIPHER       DATAMV      MAC     
CIPHERXI     DECIPHER    MACVER     
CIPHERXL     ENCIPHER    OKEYXLAT
CIPHERXO     EXPORTER    OPINENC
DATA         IKEYXLAT    PINGEN
DATAC        IMPORTER    PINVER
DATAM        IPINENC     TOKEN   

For information about the meaning of the key types, see Table 1.

source_key_identifier

Direction:	Input
Type:	String

A 64-byte string of the internal key token that contains the key to be re-enciphered. This parameter must identify an internal key token in application storage, or a label of an existing key in the DES key storage file.

If you supply TOKEN for the key_type parameter, CCA looks at the control vector in the internal key token and determines the key type from this information. If you supply TOKEN for the key_type parameter and supply a label for this parameter, the label must be unique in the DES key storage file.

exporter_key_identifier

Direction:	Input/Output
Type:	String

A 64-byte string of the internal key token, a key label that contains the exporter key-encrypting key, or a TR-31 DES key token. This parameter must identify an internal key token in application storage, or a label of an existing key in the key storage file.

If using a TR-31 token, it must have the following attributes:

• TR-31 key usage: K0
• Algorithm: T
• TR-31 mode of key use: E

If the NOCV bit is on in the internal key token containing the key-encrypting key, the key-encrypting key itself (not the key-encrypting key variant) is used to encipher the generated key.

Control vectors are explained in Control vector and the NOCV bit is shown in Table 1.

target_key_identifier

Direction:	Input/Output
Type:	String

The 64-byte field external key token that contains the re-enciphered key. The re-enciphered key can be exchanged with another cryptographic system.