1. Home
  2. Archive Old Dev Docs
  3. YubiHSM2
  4. Commands
  5. Wrap Data

    WRAP DATA

    Encrypt data.

    Description

    Encrypt (wrap) data using a Wrap Key.

    Shell Example

    Using Wrap Key 0x5b3a encrypt the string "Hello world!":

    yubihsm> encrypt aesccm 0 0x5b3a "Hello world!"
MRkj6B0AAAAAAAAAAoO4dkIeAYoPvwTV/M/JX1dwKnLqnERO1hSW4wPS

    Protocol Details

    Command

    Tc = 0x68

    Lc = 2 + LD

    Vc = I || D

    I := Object ID of the Wrap Key (2 bytes)

    D := Data to be wrapped

    Response

    Tr = 0xe8

    Lr = 13 + 1 + LD + 16

    Vr = N || W || M

    N := Nonce (13 bytes)

    W := Wrapped data (L~W~ = 1 + L~D~ bytes)

    The wrapped data includes a leading encrypted nul byte that is added automatically by the YubiHSM2. This byte is checked by UNWRAP DATA and therefore must be added if manually generating an encrypted message offline.

    M := Mac (16 bytes)