Summary of the PKA verbs
Use this table of the PKA verbs to map them to their corresponding verb names and descriptions.
The PKA verb names start with CSND. This table also references the topic that describes the verb.
| Entry point | Verb name | Description | Topic/Page |
|---|---|---|---|
| Using digital signatures | |||
| CSNDDSG | Digital Signature Generate | Generates a digital signature using a PKA private key (RSA, ECC, or PQC). | Digital Signature Generate (CSNDDSG) |
| CSNDDSV | Digital Signature Verify | Verifies a digital signature using a PKA public key (RSA, ECC, or PQC). | Digital Signature Verify (CSNDDSV) |
| Managing PKA cryptographic keys | |||
| CSNDPKG | PKA Key Generate | Generates an RSA, ECC, or PQC public-private key pair. | PKA Key Generate (CSNDPKG) |
| CSNDPKI | PKA Key Import | Imports a key token containing either a clear key or an RSA, ECC, or PQC key enciphered under a transport key. | PKA Key Import (CSNDPKI) |
| CSNDPKB | PKA Key Token Build | Creates an external PKA key token containing a clear private RSA, ECC, or PQC key. Using this token as input to the PKA Key Import verb returns an operational internal token containing an enciphered private key. Using PKA Key Token Build on a clear public RSA, ECC, or PQC key, returns the public key in a token format that other PKA verbs can directly use. PKA Key Token Build can also be used to create a skeleton token for input to the PKA Key Generate verb for the generation of an internal RSA, ECC, or PQC key token. | PKA Key Token Build (CSNDPKB) |
| CSNDKTC | PKA Key Token Change | Changes PKA key tokens (RSA, ECC, or PQC) or trusted block key tokens, from encipherment under the cryptographic coprocessor's old ASYM master key or APKA master key to encipherment under the current cryptographic coprocessor's ASYM master key or APKA master key. This callable service only changes private internal tokens. | PKA Key Token Change (CSNDKTC) |
| CSNDPKT | PKA Key Translate | Translates, converts, or exports a PKA key token from one format to another. You can also use it to compliance-check or compliance-tag a PKA key token. This verb changes only private internal PKA key tokens. | PKA Key Translate (CSNDPKT) |
| CSNDPKX | PKA Public Key Extract | Extracts a PKA public key token from a supplied PKA internal or external private key token. Performs no cryptographic verification of the PKA private token. | PKA Public Key Extract (CSNDPKX) |
| CSNDRKX | Remote Key Export | Secure transport of DES keys using asymmetric techniques from a security module (for example, the CEX*C) to a remote device such as an Automated Teller Machine (ATM). | Remote Key Export (CSNDRKX) |
| CSNDTBC | Trusted Block Create | Creates an external trusted block under dual control. A trusted block is an extension of CCA PKA key tokens using new section identifiers. | Trusted Block Create (CSNDTBC) |