AESKW wrapped payload format for ECC private key token

This table defines the contents of the AESKW payload: data will be copied into this format, then encrypted with the OPK according to the AESKW specification, and the result will be stored in the encrypted data section.

Table 1. AESKW Wrapped Payload Format for ECC Private Key Token
Offset (Dec) Number of Bytes Description
000 006 ICV (‘A6’….)
006 001 Length of padding in bits
007 001 Length of the hash of the associated data in bytes, ii
008 004 Hash options
012 ii Hash of Associated Data
12+ii mm Key data
12+ii+mm 0-7 Padding to a multiple of 8 bytes