UNWRAP DATA Command

Decrypt data.

Description

Decrypt (unwrap) data using a Wrap Key.

Shell Example

yubihsm> decrypt aesccm 0 0x5b3a MRkj6B0AAAAAAAAAAoO4dkIeAYoPvwTV/M/JX1dwKnLqnERO1hSW4wPS
Hello world!

Protocol Details

Command

Tc = 0x69
Lc = 2 + 13 + LD + 16
Vc = I || N || D || M

Parameters:

I := Object ID of a Wrap Key (2 bytes)

N := Nonce (13 bytes)

D := Data to be unwrapped

M := Mac (16 bytes)

Response

Tr = 0xe9
Lr = LD
Vr = D

Parameters:

D := Unwrapped data