CKM_SET_ATTRIBUTES

Supported Operations

Encrypt and Decrypt	No
Sign and Verify	No
SignRecover and VerifyRecover	No
Digest	No
Generate Key/Key-Pair	No
Wrap and Unwrap	No
Derive	No
Available in FIPS Mode	Yes
Restrictions in FIPS Mode	None

Key Size Range (bits) and Parameters

Minimum	1024
FIPS Minimum	1024
Maximum	4096
Parameter	None

Description

The Set Object Attribute Mechanism denoted CKM_SET_ATTRIBUTES is a TICKET mechanism used to modify the attributes of a key. It does not take a parameter.

The ticket specifies the Digest of the key/object to modify and the new attribute values. The ticket is digitally signed and the certificate used to verify the signature must be contained in the CKA_ADMIN_CERT attribute of the key object being modified.

This mechanism is only used with the CT_PresentTicket command.

Return to ProtectToolkit-C Mechanisms