pkcs11 — archive

[Michael StJohns]

As a more generic mechanism - would it make sense to change (or add) C_DeriveKey to C_DeriveKeys as below? This allows the output of one or more keys (ulKeyCount) as defined by the pTemplates. The created key handles are placed in phKeys. This has a nice side effect in that the various TLS KDF functions no longer require a special mechanism structure, and works well with functions that need to define a hierarchy of keys. C_DeriveKeys CK_DEFINE_FUNCTION(CK_RV, C_DeriveKeys) ( CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism, CK_OBJECT_HANDLE hBaseKey, CK_ULONG ulKeyCount, CK_ATTRIBUTE_PTR[] pTemplates, CK_ULONG[] ulAttributeCounts, CK_OBJECT_HANDLE_PTR[] phKeys );