English 
Tiếng ViệtPKCS#11 MECHANISMS
Mechanism and parameter registry
Mechanism identifiers, parameter structures, key types and supported operations are published for an exact library/header pair.
01
Mechanism matrix
| Mechanism | Key type | Operation | Maturity |
|---|---|---|---|
| CKM_ECDSA | EC | Sign/verify | Available/validated backend scope |
| CKM_RSA_PKCS_PSS | RSA | Sign/verify | Available/validated backend scope |
| CKM_SHA256_HMAC | Generic secret | MAC | By release |
| ML-DSA mechanism profile | PQC | Sign/verify | Controlled pilot; exact identifier/header |
| ML-KEM mechanism profile | PQC | Encapsulate/decapsulate or derive mapping | Controlled pilot |
| Vendor hybrid mechanism | Hybrid | Sign or key establishment | Project-specific; not portable |
02
Vendor-defined mechanism rule
No portability inference
A vendor-defined ML-DSA, ML-KEM or hybrid identifier must include the vendor namespace, numeric identifier, C structure definition, byte order, encoding and verifier/provider compatibility. It must not be represented as a standard Cryptoki mechanism unless standardized and implemented accordingly.