CKM_ENCODE_ATTRIBUTES

Supported Operations

Encrypt and Decrypt

No

Sign and Verify

No

SignRecover and VerifyRecover

No

Digest

No

Generate Key/Key-Pair

No

Wrap and Unwrap

Yes

Derive

No

Available in FIPS Mode

Yes

Restrictions in FIPS Mode None

Key Size Range (bytes) and Parameters

Minimum 0
FIPS Minimum 0
Maximum None
Parameter None

Description

This wrapping mechanism takes the attributes of an object and encodes them.  The encoding is not encrypted therefore the wrapping key object handle parameter is ignored.

If the object is sensitive then only non-sensitive attributes of the object are encoded.  The encoding format is a simple proprietary encoding with the attribute type, length, a value presence indicator (Boolean) and the attribute value.  This simple encoding format is used wherever BER or DER is not required.

Return to SafeNet ProtectToolkit-C Mechanisms