Symmetric Key Generate (CSNDSYG)

Use the Symmetric Key Generate verb to generate a random symmetric key and return the key in two enciphered forms, one as a local enciphered key, and the other as an RSA public-key for distribution to another node that has the corresponding private key. A DES key can be generated, or an AES key can be generated.

An AES key must be a DATA key, while a DES key must be a key-encrypting key or a default DATA key, depending on the key-formatting method specified.

You can import the RSA public key encrypted form by using the Symmetric Key Import or Symmetric Key Import2 verbs at the receiving node.

Also use the Symmetric Key Generate verb to generate any DES importer or exporter key-encrypting key encrypted under a RSA public key according to the PKA92 formatting structure. See PKA92 key format and encryption process for more details about PKA92 formatting.

Note: This verb supports PCI-HSM 2016 compliant-tagged key tokens.