Key wrapping

CCA supports two methods of wrapping the key value in a fixed-length symmetric key token for DES and AES keys: the original ECB wrapping and an enhanced CBC wrapping method, which is ANSI X9.24 compliant. These methods use the 64-byte token. HMAC keys use a variable length token with associated data and the payload wrapping method. Variable-length tokens are wrapped by using the AESKW wrapping method that is defined in ANSI X9.102.