CSSM_CSP_CreateDeriveKeyContext

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP Open Source Security for OpenVMS Volume 1:...

API Functions

CSSM_CSP_CreateAsymmetricContext

CSSM_CSP_CreateDigestContext

CSSM_CSP_CreateDeriveKeyContext

Library
Description
See Also

Parameters
Return Value

NAME

CSSM_CSP_CreateDeriveKeyContext - Create a cryptographic context to derive a symmetrickey (CDSA)

SYNOPSIS

# include <cssm.h>

CSSM_RETURN CSSMAPI CSSM_CSP_CreateDeriveKeyContext(CSSM_CSP_HANDLE CSPHandle,CSSM_ALGORITHMS AlgorithmID,CSSM_KEY_TYPE DeriveKeyType,uint32 DeriveKeyLengthInBits,const CSSM_ACCESS_CREDENTIALS *AccessCred,const CSSM_KEY *BaseKey,uint32 IterationCount,const CSSM_DATA *Salt,const CSSM_CRYPTO_DATA *Seed,CSSM_CC_HANDLE *NewContextHandle)

LIBRARY

Common Security Services Manager library (cdsa$incssm300_shr.exe)

PARAMETERS

`CSPHandle` (input)
		The handle that describes the add-in CryptographicService Provider module used to perform this function. If a NULLhandle is specified, CSSM returns an error.
`AlgorithmID` (input)
		The algorithm identification number for a derivedkey algorithm.
`DeriveKeyType` (input)
		The type of symmetric key to derive.
`DeriveKeyLengthInBits` (input)
		The logical length of the key in bits to be derived( `LogicalKeySizeInBits`)
`AccessCred` (input/optional)
		A pointer to the set of one or more credentialsrequired to access the base key. The credentials structure can containan immediate value for the credential, such as a passphrase, orthe caller can specify a callback function the CSP can use to obtainone or more credentials. If the `BaseKey` is NULL,then this parameter is optional.
`BaseKey` (input/optional)
		The base key used to derive the new key. The basekey can be a public key, a private key, or a symmetric key
`IterationCount` (input/optional)
		The number of iterations to be performed duringthe derivation process. Used heavily by password-based derivationmethods.
`Salt` (input/optional)
		A Salt used in deriving the key.
`Seed` (input/optional)
		A seed used to generate a random number. The callercan either pass a seed and seed length in bytes or pass a callbackfunction. If `Seed` is NULL, the CryptographicService Provider will use its default seed-handling mechanism.
`NewContextHandle` (output)
		Cryptographic context handle.

DESCRIPTION

This function creates a cryptographic context to derive asymmetric key, given a handle of a CSP, an algorithm, the type ofsymmetric key to derive, the length of the derived key, and an optionalseed or an optional AccessCredentials structurefrom which to derive a new key. The cryptographic context handleis returned. The cryptographic context handle can be used for callingthe cryptographic derive key function.

RETURN VALUE

A CSSM_RETURN value indicating success or specifying a particularerror condition. The value CSSM_OK indicates success. All othervalues represent an error condition.