Generate a MAC on an IPB

Command:   MI (MAC an IPB)  Authorised state required.

Function:     To generate a MAC on the Cryptogram component  of a CAP IPB.
The HSM must be in the Authorised state.
Refer to  Key Type Tablefor Key types and restrictions on Generate, Export and Import.

Inputs:        8 byte IPB represented as 16 hex ASCII characters.

Outputs:      4 byte MAC over the plaintext IPB input data.

                   Created with LMK 18-19 Variant 2 using ISO 9797 MAC Algorithm 3.

Errors:        Command only allowed from authorised – the HSM is not in authorised state.

IPB IS NOT 8 BYTES PLEASE RE-ENTER- The validation of the IPB failed.

WARNING:LESS THAN 16 ‘1’BITS IN IPB – The IPB contains less than 16  ‘1’ bits.

Example

Online-AUTH> MI <Return>

Enter IPB:FFFFFFFF00000000 <Return>

  MAC: FB1A 3C1A