Skip to main content
Tool Factory

Keys, Certificates & Tokens

Key Wrap for GOST Processor

Process key or token data with GOST Key Wrap and explicit format settings. Enter the key material, choose the required format, then review the result.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

You can run the tool again after any change.

Options

Your result appears here

Process key or token data with GOST Key Wrap and explicit format settings. Enter the key material, choose the required format, then review the result.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Key Wrap for GOST Processor performs GOST key wrapping for the supplied key or certificate data. The operation wraps supplied key bytes and returns protected wrapped key material.

The operation wraps supplied key bytes and returns protected wrapped key material. This result runs in the browser for this catalog category. Processing runs in the browser.

Key wrapping protects key bytes under a key-encryption-key; it does not provide key custody or authorization.

Instructions

  1. Provide text or data for this tool.
  2. Enter a key-encryption-key and disposable key bytes in Hex. This applies to Key Wrap for GOST Processor.
  3. Save the complete wrapped value for the round trip. This applies to Key Wrap for GOST Processor.
  4. Unwrap the value with the same key-encryption-key to check compatibility. This applies to Key Wrap for GOST Processor.

Example

Input: Key-encryption-key bytes "000102030405060708090a0b0c0d0e0f" wrapping test key bytes "aabbccddeeff00112233445566778899".

Settings: Key Wrap for GOST Processor: Algorithm: GOST key wrapping; input and output encoding: Hex. Input: key-encryption-key and the key bytes to wrap. Keep key bytes separate from the key-encryption-key and use a disposable fixture.

Result: The operation wraps supplied key bytes and returns protected wrapped key material.

Limits

  • Key Wrap for GOST Processor: GOST key wrapping requires the matching key-encryption-key for the reverse operation.
  • Key Wrap for GOST Processor: Wrapping protects key bytes in transit or storage but does not make a weak key stronger.
  • Key Wrap for GOST Processor: The result does not establish who may unwrap the key or how the key is stored.

Questions

What does GOST key wrap process?

Key wrapping protects key material for storage or transfer. It is a different operation from encrypting a general message. Supply the key material in the chosen Input representation.

Which parameters must match for GOST key wrapping?

Match Key, User Key Material, Algorithm, sBox where applicable, and Key wrapping mode. A different GOST wrapping variant can produce an incompatible result.

Does successful unwrapping identify the key owner?

Unwrapping can check the wrapping construction, but it does not establish a human or service identity. Confirm the key source and the receiving system’s expected key purpose. Preserve the wrapping parameters with the wrapped material.