Summary

Enhance SunPKCS11 provider to support key generation for various Hmac mechanisms when supported by underlying native PKCS11 library.

Problem

SunPKCS11 provider does not support key generation for Hmac mechanisms, thus callers have to create keys using other providers such as SunJCE, or 3rd party utility/tools.

Solution

Enhance SunPKCS11 provider to to support the following crypto services:

• KeyGenerator: HmacMD5, HmacSHA1, HmacSHA224, HmacSHA256 HmacSHA384 HmacSHA512, HmacSHA512/224, HmacSHA512/256.

Specification