Skip to content

CKA_MODIFIABLE must be true to Unwrap AES Key #707

@reznik99

Description

@reznik99

When unwrapping an AES-256 Key into a SoftHSM2 partition using RSA-OAEP SHA-1 the following error is thrown:

An object is with CKA_MODIFIABLE set to false is not modifiable

Setting CKA_MODIFIABLE to True in the unwrapping template, resolves the issue.

But unwrapping a key creates a new object, it doesn't modify the object, why is this error being thrown, and is this expected?

I would like my Injected keys to not be modifiable.

Unwrapping Template:

CKA_SENSITIVE=true
CKA_TOKEN=true
CKA_PRIVATE=true
CKA_ENCRYPT=true
CKA_EXTRACTABLE=true
CKA_MODIFIABLE=false

Thanks,
Frank

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions