CKM_SET_ATTRIBUTES
This section provides a summary of CKM_SET_ATTRIBUTES.
Supported operations
| Operation | Supported |
|---|---|
| Encrypt and Decrypt | No |
| Sign and Verify | No |
| SignRecover and VerifyRecover | No |
| Digest | No |
| Generate Key/Key-Pair | No |
| Wrap and Unwrap | No |
| Derive | No |
FIPS Mode support
| Available in FIPS Mode | Restrictions in FIPS Mode |
|---|---|
| Yes | None |
Key size range (bits) and parameters
| Key size minimum/maximum | Value |
|---|---|
| Minimum | 1024 |
| FIPS Minimum | 1024 |
| Maximum | 4096 |
Parameter
None
Mechanism description
The Set Object Attribute Mechanism denoted CKM_SET_ATTRIBUTES is a TICKET mechanism used to modify the attributes of a key. It does not take a parameter.
The ticket specifies the Digest of the key/object to modify and the new attribute values. The ticket is digitally signed and the certificate used to verify the signature must be contained in the CKA_ADMIN_CERT attribute of the key object being modified.
This mechanism is only used with the CT_PresentTicket command.
Return to ProtectToolkit-C mechanisms.
