MIRkey Specifications

Last updated November 24, 2020

Operating System	Version	Architecture
Windows	Windows 8 and later, Windows Server 2012 and later	64bit, 32bit
Mac OS	10.7 (Lion) to 10.15 (Catalina)	64bit
Linux	Ubuntu 18.04 LTS and later	amd64

FIDO Certified™ FIDO2 L1 (U2F/CTAP1 and FIDO2/CTAP2) with hmac-secret extension.
PKCS#11 (Windows, Linux, macOS). For a full list of PKCS#11 mechanisms supported, see the developer documentation.
Microsoft CNG Key Storage Provider
Java Cryptography Architecture (JCA) and the Java Cryptography Extension (JCE) using the SunPKCS11 Provider.

Hash Algorithms: MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, RIPEMD-160
Symmetric Algorithms: HMAC using supported hash algorithms, AES (128,192,256), TripleDES and DES
Symmetric Cipher Modes: ECB, CBC with PKCS 7 padding or no padding
Asymmetric Algorithms: RSA (1024-2048), ECC (192-521)
ECC Curves supported: secp192r1, secp224r1, secp256r1, secp384r1, secp521r1 secp192k1, secp224k1, secp256k1 (the Bitcoin curve), Brainpool 256r1 and 384r1, Curve25519, Curve448
ECDH and BIP32 CKD Key derivation
Signing and Verification: ECDSA, RSA (X509, PKCS 1.5, PKCS 2.1 with OAEP)
Key Wrapping: CKM_AES_KEY_WRAP with and without padding (RFC3394), CKM_DES3_CBC (although not recommended)
Hardware True Random Number Generator (TRNG)

Non-volatile Storage: 64 token objects, 128KB total size. Volatile session storage: 8 objects per session. 8 concurrent sessions.
PKCS#11 object types: All defined object types supported.

Device management: ellipticSecure Device Manager and standard PKCS#11 tools supported (p11tool etc.)