Page Comparison

ID length

1

Length of the key ID

Key ID

var

RSA key ID used for the session key encryption

Encrypted KEK

256

Encrypted KEK block:

• encrypted with RSA key (RSA/ECB/OAEPWithSHA-256AndMGF1Padding)

• cleartext contains the KEK (16 bytes) and the IV (16 bytes)

Encrypted pseudo PIN block

25616

Encrypted pseudo PIN block:

• encrypted with KEK key (AES/CBC/NoPadding)

• cleartext contains the pseudo PIN block (see below)