GENERATE SYMMETRIC KEY

Available with firmware version 2.3.1 or later.

Generate a symmetric key.

Description

Generate a symmetric Key in the device.

Shell Example

Generate a new AES256 key in the device:

yubihsm> generate symmetric 0 0 aeskey 1 encrypt-ecb,decrypt-ecb aes256
Generated symmetric key 0xc040

Protocol Details

Command

Tc = 0x6e

Lc = 2 + 40 + 2 + 8 + 1

Vc = I || L || D || C || A

Generate a symmetric key with a given ID. Each parameter has a fixed length and the order is compulsory.

I := Object ID of the symmetric key (2 bytes)

L := Label (40 bytes)

D := Domains (2 bytes)

C := Capabilities (8 bytes)

A := Algorithm (1 byte)

Response

Tr = 0xee

Lr = 2

Vr = I

I := Object ID of the created symmetric key (2 bytes)