pkcs11 — archive

[Michael StJohns]

Submitter's message This is the formal submission for CKA_UUID and CKA_WRAP_WITH_UUID. It is also the formal submission for CKA_DERIVE_TEMPLATE (not previously described) and a slight update in the wording for CKA_UNWRAP_TEMPLATE with respect to how that template can be changed. -- Michael StJohns Document Name : pkcs11-cka_uuid-wrapWithUUID-cka-derive-template.docx Description Three items here, but did this as a single document since the edits were all in this section: 1) Fixing the text on CKA_UNWRAP_TEMPLATE to indicate it can be set once and then is read-only. 2) Adding CKA_UUID and CKA_WRAP_WITH_UUID. The first attribute marks each key with a pseudo-random UUID that changes anytime the key changes. The second points to the first for the purpose of uniquely identifying a key that can be used to wrap this key. 3) Added CKA_DERIVE_TEMPLATE. This exactly mirrors CKA_UNWRAP_TEMPLATE in that it is applied to a key derived from the key this attribute is on. This is necessary to set things like the sensitivity or extractability of derived keys. Download Latest Revision Public Download Link Submitter : Michael StJohns Group : OASIS PKCS 11 TC Folder : Working Drafts Date submitted : 2013-08-01 06:54:29