Skip to main content
Tool Factory

Keys, Certificates & Tokens

Key Unwrap for AES Processor

Process key or token data with AES Key Unwrap and explicit format settings. Enter the key material, choose the required format, then review the result.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

You can run the tool again after any change.

Options

Your result appears here

Process key or token data with AES Key Unwrap and explicit format settings. Enter the key material, choose the required format, then review the result.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Key Unwrap for AES Processor performs AES Key Wrap for the supplied key or certificate data. The operation unwraps wrapped key material and returns the recovered key bytes.

The operation unwraps wrapped key material and returns the recovered key bytes. This result runs in the browser for this catalog category. Processing runs in the browser.

Unwrapping recovers key bytes for a compatible key-encryption-key; it does not authorize or validate the recovered key.

Instructions

  1. Provide text or data for this tool.
  2. Enter complete wrapped key material in Hex. This applies to Key Unwrap for AES Processor.
  3. Enter the matching key-encryption-key and keep its bytes unchanged. This applies to Key Unwrap for AES Processor.
  4. Compare recovered key bytes with the original disposable fixture. This applies to Key Unwrap for AES Processor.

Example

Input: Wrapped key material "aabbccddeeff00112233445566778899" with matching key-encryption-key bytes.

Settings: Key Unwrap for AES Processor: Algorithm: AES Key Wrap; input and output encoding: Hex. Input: complete wrapped key material and the matching unwrapping key. Keep key bytes separate from the key-encryption-key and use a disposable fixture.

Result: The operation unwraps wrapped key material and returns the recovered key bytes.

Limits

  • Key Unwrap for AES Processor: AES Key Wrap requires the matching key-encryption-key for the reverse operation.
  • Key Unwrap for AES Processor: Wrapping protects key bytes in transit or storage but does not make a weak key stronger.
  • Key Unwrap for AES Processor: The result does not establish who may unwrap the key or how the key is stored.

Questions

What does AES key unwrap process?

Key wrapping protects key material for storage or transfer. It is a different operation from encrypting a general message. Supply the key material in the chosen Input representation.

Which parameters must match for AES key wrapping?

Use the same Key (KEK) and IV for wrapping and unwrapping. This operation follows the AES key-wrap format, not AES-GCM or a password derivation format.

Does successful unwrapping identify the key owner?

Unwrapping can check the wrapping construction, but it does not establish a human or service identity. Confirm the key source and the receiving system’s expected key purpose. Preserve the wrapping parameters with the wrapped material.