CKM_SET_ATTRIBUTES

Supported Operations

Encrypt and Decrypt No
Sign and Verify No
SignRecover and VerifyRecover No
Digest No
Generate Key/Key-Pair No
Wrap and Unwrap No
Derive No
Available in FIPS Mode Yes
Restrictions in FIPS Mode None

Key Size Range (bits) and Parameters

Minimum 1024
FIPS Minimum 1024
Maximum 4096
Parameter None

Description

The Set Object Attribute Mechanism denoted CKM_SET_ATTRIBUTES is a TICKET mechanism used to modify the attributes of a key. It does not take a parameter.

The ticket specifies the Digest of the key/object to modify and the new attribute values. The ticket is digitally signed and the certificate used to verify the signature must be contained in the CKA_ADMIN_CERT attribute of the key object being modified.

This mechanism is only used with the CT_PresentTicket command.

Return to ProtectToolkit-C Mechanisms