Skip to main content
Tool Factory

Keys, Certificates & Tokens

Key Wrap for AES Processor

Process key or token data with AES Key Wrap and explicit format settings. Enter the key material, choose the required format, then review the result.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

You can run the tool again after any change.

Options

Your result appears here

Process key or token data with AES Key Wrap and explicit format settings. Enter the key material, choose the required format, then review the result.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Key Wrap for AES Processor performs AES Key Wrap for the supplied key or certificate data. The operation wraps supplied key bytes and returns protected wrapped key material.

The operation wraps supplied key bytes and returns protected wrapped key material. This result runs in the browser for this catalog category. Processing runs in the browser.

Key wrapping protects key bytes under a key-encryption-key; it does not provide key custody or authorization.

Instructions

  1. Provide text or data for this tool.
  2. Enter a key-encryption-key and disposable key bytes in Hex. This applies to Key Wrap for AES Processor.
  3. Save the complete wrapped value for the round trip. This applies to Key Wrap for AES Processor.
  4. Unwrap the value with the same key-encryption-key to check compatibility. This applies to Key Wrap for AES Processor.

Example

Input: Key-encryption-key bytes "000102030405060708090a0b0c0d0e0f" wrapping test key bytes "aabbccddeeff00112233445566778899".

Settings: Key Wrap for AES Processor: Algorithm: AES Key Wrap; input and output encoding: Hex. Input: key-encryption-key and the key bytes to wrap. Keep key bytes separate from the key-encryption-key and use a disposable fixture.

Result: The operation wraps supplied key bytes and returns protected wrapped key material.

Limits

  • Key Wrap for AES Processor: AES Key Wrap requires the matching key-encryption-key for the reverse operation.
  • Key Wrap for AES Processor: Wrapping protects key bytes in transit or storage but does not make a weak key stronger.
  • Key Wrap for AES Processor: The result does not establish who may unwrap the key or how the key is stored.

Questions

What does AES key wrap process?

Key wrapping protects key material for storage or transfer. It is a different operation from encrypting a general message. Supply the key material in the chosen Input representation.

Which parameters must match for AES key wrapping?

Use the same Key (KEK) and IV for wrapping and unwrapping. This operation follows the AES key-wrap format, not AES-GCM or a password derivation format.

Does successful unwrapping identify the key owner?

Unwrapping can check the wrapping construction, but it does not establish a human or service identity. Confirm the key source and the receiving system’s expected key purpose. Preserve the wrapping parameters with the wrapped material.