You've already forked opencryptoki
mirror of
https://github.com/opencryptoki/opencryptoki.git
synced 2026-10-24 05:39:17 +03:00
Include attributes CKA_IBM_PROTKEY_EXTRACTABLE ('K') and
CKA_IBM_PROTKEY_NEVER_EXTRACTABLE ('Z') into the list of attributes
that can be used for filtering keys.
However, only CKA_IBM_PROTKEY_EXTRACTABLE ('K') can be used for setting
attributes.
CKA_TRUSTED can be used for setting attributes, but it can only be set to
TRUE by the SO user.
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>