RSA Security 5 manual Input constraints

AI_DSA

Input constraints:

The DSA algorithm requires that the input data (the data to sign) be exactly 20 bytes long. Normally, this 20-byte input is the result of SHA1 output.

Output considerations:

The signature result of B_SignFinal will be 40 bytes long; these bytes appear in the order (r, s).

Token-based algorithm methods:

AI_DSA may be used to access the hardware-related algorithm methods AM_TOKEN_DSA_SIGN and AM_TOKEN_DSA_VERIFY for use with BHAPI.

Token-based key info types:

When used with one of the hardware algorithm methods listed above, AI_DSA should be used with KI_Token or KI_KeypairToken.

C h a p t e r 2 A l g o r i t h m I n f o Ty p e s 51