The existing RSA private key tokens use a DES object protection key to wrap the private key parts of the key. This wrapping is not compliant for large modulus sizes. New private key sections have been introduced for RSA keys where the object protection key is an AES key. These private key sections are compliant.