ENCRYPT AES CBC

Available with firmware version 2.3.1 or later.

Encrypt data in CBC mode.

Description

Encrypt data in CBC mode.

Shell Example

Encrypt data using key 0x008c:

yubihsm> encrypt aescbc 0 0x008c 00000000000000000000000000000000 c5cffa1c2333fd824a86951cf602bca1
SG0OU4CT2pH2dnd967KyTU5OgdJ8edxJjOf3Yt52gGQ=

Protocol Details

Command

Tc = 0x72

Lc = 2 + 16 + LD

Vc = I || IV || D

I := Object ID of the symmetric Key (2 bytes)

IV := Encryption initialization vector (IV) in HEX (16 bytes)

D := Encryption data (multiple of 16 bytes)

Response

Tr = 0xf2

Lr = LE

Vr = E

E := Encrypted data