Key Type and Storage Definition

• The device key can be generated or installed only during device initialization. Internal user keys can be generated or installed using the cryptographic device management tool.
• The device key and internal user keys are stored in the key storage area. Their index numbers start from 0. Each index number corresponds to a signature key pair and an encryption key pair. The index number 0 indicates the device key. The index numbers starting from 1 indicate user keys.

  Key Pair Index	Public Key	Private Key
  0x00	Device signature	Device signature
  	Device encryption	Device encryption
  0x01	User signature	User signature
  	User encryption	User encryption
  ...	...	...
  	...	...

KEKs are generated or installed using the cryptographic device management tool, and stored in the key storage area with index numbers starting from 1. Their length is 128 bits.