CÁC MECHANISM PKCS#11

Sổ đăng ký mechanism và tham số

Mã mechanism, cấu trúc tham số, loại khóa và thao tác được công bố cho đúng cặp thư viện/header.

Ma trận mechanism

Mechanism	Key type	Operation	Maturity
CKM_ECDSA	EC	Sign/verify	Available/validated backend scope
CKM_RSA_PKCS_PSS	RSA	Sign/verify	Available/validated backend scope
CKM_SHA256_HMAC	Generic secret	MAC	By release
ML-DSA mechanism profile	PQC	Sign/verify	Controlled pilot; exact identifier/header
ML-KEM mechanism profile	PQC	Encapsulate/decapsulate or derive mapping	Controlled pilot
Vendor hybrid mechanism	Hybrid	Sign or key establishment	Project-specific; not portable

Quy tắc mechanism do nhà cung cấp định nghĩa

No portability inference

A vendor-defined ML-DSA, ML-KEM or hybrid identifier must include the vendor namespace, numeric identifier, C structure definition, byte order, encoding and verifier/provider compatibility. It must not be represented as a standard Cryptoki mechanism unless standardized and implemented accordingly.