Restrictions

Edit online

The restrictions for CSNDPKB.

  • When generating a key for use with ANSI X9.31 digital signatures, the key length must be 1024, 1280, 1536, 1792, 2048, or 4096 bits.
  • Allowable ECC key bit lengths are based on curve type. For Brainpool, the key length must be 160, 192, 224, 256, 320, 384, or 512. For Prime, it must be 192, 224, 256, 384, or 521.

QSA keys that can be generated have the following restrictions:

  • CRYSTALS-Dilithium (4,4), pre-hash (SHA512) and pure ML-DSA is only available for CCA releases 8.3 or later.
  • CRYSTALS-Dilithium (6,5), pre-hash (SHA512) and pure ML-DSA is only available for CCA releases 8.3 or later.
  • CRYSTALS-Dilithium (8,7), pre-hash (SHA512) and pure ML-DSA is only available for CCA releases 8.3 or later.
  • CRYSTALS-Dilithium (6,5), Round 2 is only available for CCA releases 7.1 and later.
  • CRYSTALS-Dilithium (8,7), Round 2 is only available for CCA releases 7.3 and later.
  • ML-KEM 768) is only available for CCA releases 8.3 or later.
  • ML-KEM (1024) is only available for CCA releases 8.3 or later.
  • CRYSTALS-Kyber (1024), Round 2 is only available for CCA releases 8.0 and later.
  • CRYSTALS-Kyber (768), Round 2 is only available for CCA releases 8.2 and later.
  • CRYSTALS-Dilithium (6,5), Round 3 is only available for CCA releases 8.0 and later.
  • CRYSTALS-Dilithium (8,7), Round 3 is only available for CCA releases 8.0 and later.
  • CRYSTALS-Kyber (1024), Round 3 is only available for CCA releases 8.2 and later.
  • CRYSTALS-Kyber (768), Round 3 is only available for CCA releases 8.2 and later.