CKM_SET_ATTRIBUTES

Supported Operations

Encrypt and Decrypt

No

Sign and Verify

No

SignRecover and VerifyRecover

No

Digest

No

Generate Key/Key-Pair

No

Wrap and Unwrap

No

Derive

No

Available in FIPS Mode

Yes

Restrictions in FIPS Mode None

Key Size Range (bytes) and Parameters

Minimum 1024
FIPS Minimum

1024

Maximum 4096
Parameter None

Description

The Set Object Attribute Mechanism denoted CKM_SET_ATTRIBUTES is a TICKET mechanism used to modify the attributes of a key. It does not take a parameter.

The ticket specifies the Digest of the key/object to modify and the new attribute values. The ticket is digitally signed and the certificate used to verify the signature must be contained in the CKA_ADMIN_CERT attribute of the key object being modified.

This mechanism is only used with the CT_PresentTicket command.

Return to SafeNet ProtectToolkit-C Mechanisms