Cryptographic key-verification techniques

The key-verification implementations described in this document employ several mechanisms for assuring the integrity and value of the key.

Master-key verification algorithms
The CEX*C implementations employ triple-length DES and PKA master keys (three DES keys) that are internally represented in 24 bytes (168 bits).
CCA DES-key verification algorithm
The cryptographic engines provide a method for verifying the value of a DES cryptographic key or key part without revealing information about the value of the key or key part.
Encrypt zeros AES-key verification algorithm
The cryptographic engine provides a method for verifying the value of an AES cryptographic key or key part without revealing information about the value of the key or key part.
Encrypt zeros DES-key verification algorithm
The cryptographic engine provides a method for verifying the value of a DES cryptographic key or key part without revealing information about the value of the key or key part.
SHAVP1 algorithm
This algorithm is used by the Key Test2 callable service to generate and verify the verification pattern.

Parent topic: Cryptographic algorithms and processes