PKA Public Key Extract (CSNDPKX)

Use the PKA Public Key Extract verb to extract a PKA public key token from a supplied PKA internal or external private key token.

The PKA Public Key Extract verb is used to extract a public-key from a PKA key-token that contains a public-private key-pair. The public-private keys can be an RSA, ECC, CRYSTALS-Dilithium, or CRYSTALS-Kyber key-pair. The extracted public key is returned in a PKA public-key token. Both the public key and the related private key must be present in the source PKA key-token. The source private-key can be in the clear or enciphered.

This verb performs no cryptographic verification of the PKA private token. You can verify the private token by using it in a verb such as Digital Signature Generate.

This verb does not need to document any Restrictions nor Required commands.