Skip to content

CKA_MODIFIABLE must be true to Unwrap AES Key #707

@reznik99

Description

@reznik99

When unwrapping an AES-256 Key into a SoftHSM2 partition using RSA-OAEP SHA-1 the following error is thrown:

An object is with CKA_MODIFIABLE set to false is not modifiable

Setting CKA_MODIFIABLE to True in the unwrapping template, resolves the issue.

But unwrapping a key creates a new object, it doesn't modify the object, why is this error being thrown, and is this expected?

I would like my Injected keys to not be modifiable.

Unwrapping Template:

CKA_SENSITIVE=true
CKA_TOKEN=true
CKA_PRIVATE=true
CKA_ENCRYPT=true
CKA_EXTRACTABLE=true
CKA_MODIFIABLE=false

Thanks,
Frank

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions