Expand description
Raw OASIS PKCS#11 3.2 declarations. See the crate README and NOTICE.txt.
This layer supplies C layouts and nullable unsafe function pointers. The caller owns module lifetime, version negotiation, buffer validity and synchronization. A declared mechanism or function is not a capability or security-policy claim.
§OASIS PKCS#11 3.2 header comments
The following comments preserve the original header documentation. Normative requirements are established by the corresponding published specification.
The Linux profile uses natural alignment; the Windows profile uses one-byte packing. OASIS comments leave the UNIX packing mechanism to the integrator. Establish the actual module ABI before calling it; its advertised PKCS#11 version and its structure alignment are separate properties.
§pkcs11.h:1
/* Copyright (c) OASIS Open 2016,2019,2024. All Rights Reserved./
* /Distributed under the terms of the OASIS IPR Policy,
* [http://www.oasis-open.org/policies-guidelines/ipr], AS-IS, WITHOUT ANY
* IMPLIED OR EXPRESS WARRANTY; there is no warranty of MERCHANTABILITY, FITNESS FOR A
* PARTICULAR PURPOSE or NONINFRINGEMENT of the rights of others.
*/§pkcs11.h:8
/* Latest version of the specification:
* http://docs.oasis-open.org/pkcs11/pkcs11-base/v3.2/pkcs11-base-v3.2.html
*/§pkcs11.h:19
/* Before including this file (pkcs11.h) (or pkcs11t.h by
* itself), 5 platform-specific macros must be defined. These
* macros are described below, and typical definitions for them
* are also given. Be advised that these definitions can depend
* on both the platform and the compiler used (and possibly also
* on whether a Cryptoki library is linked statically or
* dynamically).
*
* In addition to defining these 5 macros, the packing convention
* for Cryptoki structures should be set. The Cryptoki
* convention on packing is that structures should be 1-byte
* aligned.
*
* If you're using Windows this might be done by using the following
* preprocessor directive before including pkcs11.h or pkcs11t.h:
*
* #pragma pack(push, cryptoki, 1)
*
* and using the following preprocessor directive after including
* pkcs11.h or pkcs11t.h:
*
* #pragma pack(pop, cryptoki)
*
* In a UNIX environment, you're on your own for this. You might
* not need to do (or be able to do!) anything.
*
*
* Now for the macros:
*
*
* 1. CK_PTR: The indirection string for making a pointer to an
* object. It can be used like this:
*
* typedef CK_BYTE CK_PTR CK_BYTE_PTR;
*
* If you're using Windows, it might be defined by:
*
* #define CK_PTR *
*
* In a typical UNIX environment, it might be defined by:
*
* #define CK_PTR *
*
*
* 2. CK_DECLARE_FUNCTION(returnType, name): A macro which makes
* an importable Cryptoki library function declaration out of a
* return type and a function name. It should be used in the
* following fashion:
*
* extern CK_DECLARE_FUNCTION(CK_RV, C_Initialize)(
* CK_VOID_PTR pReserved
* );
*
* If you're using Windows to declare a function in a Win32 Cryptoki .dll,
* it might be defined by:
*
* #define CK_DECLARE_FUNCTION(returnType, name) \
* returnType __declspec(dllimport) name
*
* In a UNIX environment, it might be defined by:
*
* #define CK_DECLARE_FUNCTION(returnType, name) \
* returnType name
*
*
* 3. CK_DECLARE_FUNCTION_POINTER(returnType, name): A macro
* which makes a Cryptoki API function pointer declaration or
* function pointer type declaration out of a return type and a
* function name. It should be used in the following fashion:
*
* // Define funcPtr to be a pointer to a Cryptoki API function
* // taking arguments args and returning CK_RV.
* CK_DECLARE_FUNCTION_POINTER(CK_RV, funcPtr)(args);
*
* or
*
* // Define funcPtrType to be the type of a pointer to a
* // Cryptoki API function taking arguments args and returning
* // CK_RV, and then define funcPtr to be a variable of type
* // funcPtrType.
* typedef CK_DECLARE_FUNCTION_POINTER(CK_RV, funcPtrType)(args);
* funcPtrType funcPtr;
*
* If you're using Windows to access
* functions in a Win32 Cryptoki .dll, in might be defined by:
*
* #define CK_DECLARE_FUNCTION_POINTER(returnType, name) \
* returnType __declspec(dllimport) (* name)
*
* In a UNIX environment, it might be defined by:
*
* #define CK_DECLARE_FUNCTION_POINTER(returnType, name) \
* returnType (* name)
*
*
* 4. CK_CALLBACK_FUNCTION(returnType, name): A macro which makes
* a function pointer type for an application callback out of
* a return type for the callback and a name for the callback.
* It should be used in the following fashion:
*
* CK_CALLBACK_FUNCTION(CK_RV, myCallback)(args);
*
* to declare a function pointer, myCallback, to a callback
* which takes arguments args and returns a CK_RV. It can also
* be used like this:
*
* typedef CK_CALLBACK_FUNCTION(CK_RV, myCallbackType)(args);
* myCallbackType myCallback;
*
* If you're using Windows, it might be defined by:
*
* #define CK_CALLBACK_FUNCTION(returnType, name) \
* returnType (* name)
*
* In a UNIX environment, it might be defined by:
*
* #define CK_CALLBACK_FUNCTION(returnType, name) \
* returnType (* name)
*
*
* 5. NULL_PTR: This macro is the value of a NULL pointer.
*
* In any ANSI/ISO C environment (and in many others as well),
* this should best be defined by
*
* #ifndef NULL_PTR
* #define NULL_PTR 0
* #endif
*/§pkcs11.h:150
/* All the various Cryptoki types and #define'd values are in the
* file pkcs11t.h.
*/§pkcs11.h:158
/* ==============================================================
* Define the "extern" form of all the entry points.
* ==============================================================
*/§pkcs11.h:167
/* pkcs11f.h has all the information about the Cryptoki
* function prototypes.
*/§pkcs11.h:176
/* ==============================================================
* Define the typedef form of all the entry points. That is, for
* each Cryptoki function C_XXX, define a type CK_C_XXX which is
* a pointer to that kind of function.
* ==============================================================
*/§pkcs11.h:187
/* pkcs11f.h has all the information about the Cryptoki
* function prototypes.
*/§pkcs11.h:196
/* ==============================================================
* Define structed vector of entry points. A CK_FUNCTION_LIST
* contains a CK_VERSION indicating a library's Cryptoki version
* and then a whole slew of function pointers to the routines in
* the library. This type was declared, but not defined, in
* pkcs11t.h.
* ==============================================================
*/§pkcs11.h:208
/* Create the 3.2 Function list */§pkcs11.h:211
/* Cryptoki version */§pkcs11.h:213
/* Pile all the function pointers into the CK_FUNCTION_LIST. */§pkcs11.h:214
/* pkcs11f.h has all the information about the Cryptoki
* function prototypes.
*/§pkcs11.h:221
/* don't include the 3.2 and later functions */§pkcs11.h:223
/* Create the 3.0 Function list */§pkcs11.h:226
/* Cryptoki version */§pkcs11.h:228
/* Pile all the function pointers into the CK_FUNCTION_LIST. */§pkcs11.h:229
/* pkcs11f.h has all the information about the Cryptoki
* function prototypes.
*/§pkcs11.h:238
/* don't include the 3.0 and later functions */§pkcs11.h:240
/* Continue to define the old CK_FUNCTION_LIST */§pkcs11.h:243
/* Cryptoki version */§pkcs11.h:245
/* Pile all the function pointers into the CK_FUNCTION_LIST. */§pkcs11.h:246
/* pkcs11f.h has all the information about the Cryptoki
* function prototypes.
*/§pkcs11.h:263
/* _PKCS11_H_ */§pkcs11t.h:1
/* Copyright (c) OASIS Open 2016, 2019, 2024. All Rights Reserved./
* /Distributed under the terms of the OASIS IPR Policy,
* [http://www.oasis-open.org/policies-guidelines/ipr], AS-IS, WITHOUT ANY
* IMPLIED OR EXPRESS WARRANTY; there is no warranty of MERCHANTABILITY, FITNESS FOR A
* PARTICULAR PURPOSE or NONINFRINGEMENT of the rights of others.
*/§pkcs11t.h:8
/* Latest version of the specification:
* http://docs.oasis-open.org/pkcs11/pkcs11-spec/v3.2/pkcs11-spec-v3.2.html
*/§pkcs11t.h:12
/* See top of pkcs11.h for information about the macros that
* must be defined and the structure-packing conventions that
* must be set before including this file.
*/§pkcs11t.h:36
/* an unsigned 8-bit value */§pkcs11t.h:39
/* an unsigned 8-bit character */§pkcs11t.h:42
/* an 8-bit UTF-8 character */§pkcs11t.h:45
/* a BYTE-sized Boolean flag */§pkcs11t.h:48
/* an unsigned value, at least 32 bits long */§pkcs11t.h:51
/* a signed value, the same size as a CK_ULONG */§pkcs11t.h:54
/* at least 32 bits; each bit is a Boolean flag */§pkcs11t.h:58
/* some special values for certain CK_ULONG variables */§pkcs11t.h:70
/* Pointer to a CK_VOID_PTR-- i.e., pointer to pointer to void */§pkcs11t.h:74
/* The following value is always invalid if used as a session
* handle or object handle
*/§pkcs11t.h:81
/* integer portion of version number */§pkcs11t.h:82
/* 1/100ths portion of version number */§pkcs11t.h:89
/* Cryptoki interface ver */§pkcs11t.h:90
/* blank padded */§pkcs11t.h:91
/* must be zero */§pkcs11t.h:92
/* blank padded */§pkcs11t.h:93
/* version of library */§pkcs11t.h:99
/* CK_NOTIFICATION enumerates the types of notifications that
* Cryptoki provides to an application
*/§pkcs11t.h:111
/* CK_SLOT_INFO provides information about a slot */§pkcs11t.h:113
/* blank padded */§pkcs11t.h:114
/* blank padded */§pkcs11t.h:117
/* version of hardware */§pkcs11t.h:118
/* version of firmware */§pkcs11t.h:121
/* flags: bit flags that provide capabilities of the slot
* Bit Flag Mask Meaning
*/§pkcs11t.h:124
/* a token is there */§pkcs11t.h:125
/* removable devices*/§pkcs11t.h:126
/* hardware slot */§pkcs11t.h:131
/* CK_TOKEN_INFO provides information about a token */§pkcs11t.h:133
/* blank padded */§pkcs11t.h:134
/* blank padded */§pkcs11t.h:135
/* blank padded */§pkcs11t.h:136
/* blank padded */§pkcs11t.h:137
/* see below */§pkcs11t.h:139
/* max open sessions */§pkcs11t.h:140
/* sess. now open */§pkcs11t.h:141
/* max R/W sessions */§pkcs11t.h:142
/* R/W sess. now open */§pkcs11t.h:143
/* in bytes */§pkcs11t.h:144
/* in bytes */§pkcs11t.h:145
/* in bytes */§pkcs11t.h:146
/* in bytes */§pkcs11t.h:147
/* in bytes */§pkcs11t.h:148
/* in bytes */§pkcs11t.h:149
/* version of hardware */§pkcs11t.h:150
/* version of firmware */§pkcs11t.h:151
/* time */§pkcs11t.h:154
/* The flags parameter is defined as follows:
* Bit Flag Mask Meaning
*/§pkcs11t.h:157
/* has random # generator */§pkcs11t.h:158
/* token is write-protected */§pkcs11t.h:159
/* user must login */§pkcs11t.h:160
/* normal user's PIN is set */§pkcs11t.h:162
/* CKF_RESTORE_KEY_NOT_NEEDED. If it is set,
* that means that *every* time the state of cryptographic
* operations of a session is successfully saved, all keys
* needed to continue those operations are stored in the state
*/§pkcs11t.h:169
/* CKF_CLOCK_ON_TOKEN. If it is set, that means
* that the token has some sort of clock. The time on that
* clock is returned in the token info structure
*/§pkcs11t.h:175
/* CKF_PROTECTED_AUTHENTICATION_PATH. If it is
* set, that means that there is some way for the user to login
* without sending a PIN through the Cryptoki library itself
*/§pkcs11t.h:181
/* CKF_DUAL_CRYPTO_OPERATIONS. If it is true,
* that means that a single session with the token can perform
* dual simultaneous cryptographic operations (digest and
* encrypt; decrypt and digest; sign and encrypt; and decrypt
* and sign)
*/§pkcs11t.h:189
/* CKF_TOKEN_INITIALIZED. If it is true, the
* token has been initialized using C_InitializeToken or an
* equivalent mechanism outside the scope of PKCS #11.
* Calling C_InitializeToken when this flag is set will cause
* the token to be reinitialized.
*/§pkcs11t.h:197
/* CKF_SECONDARY_AUTHENTICATION. If it is
* true, the token supports secondary authentication for
* private key objects.
*/§pkcs11t.h:203
/* CKF_USER_PIN_COUNT_LOW. If it is true, an
* incorrect user login PIN has been entered at least once
* since the last successful authentication.
*/§pkcs11t.h:209
/* CKF_USER_PIN_FINAL_TRY. If it is true,
* supplying an incorrect user PIN will it to become locked.
*/§pkcs11t.h:214
/* CKF_USER_PIN_LOCKED. If it is true, the
* user PIN has been locked. User login to the token is not
* possible.
*/§pkcs11t.h:220
/* CKF_USER_PIN_TO_BE_CHANGED. If it is true,
* the user PIN value is the default value set by token
* initialization or manufacturing, or the PIN has been
* expired by the card.
*/§pkcs11t.h:227
/* CKF_SO_PIN_COUNT_LOW. If it is true, an
* incorrect SO login PIN has been entered at least once since
* the last successful authentication.
*/§pkcs11t.h:233
/* CKF_SO_PIN_FINAL_TRY. If it is true,
* supplying an incorrect SO PIN will it to become locked.
*/§pkcs11t.h:238
/* CKF_SO_PIN_LOCKED. If it is true, the SO
* PIN has been locked. SO login to the token is not possible.
*/§pkcs11t.h:243
/* CKF_SO_PIN_TO_BE_CHANGED. If it is true,
* the SO PIN value is the default value set by token
* initialization or manufacturing, or the PIN has been
* expired by the card.
*/§pkcs11t.h:250
/* CKF_ERROR_STATE. If it is true, the token failed a FIPS 140
* self-test and entered an error state. */§pkcs11t.h:254
/*
* CKF_SEED_RANDOM_REQUIRED. If this is true the token’s
* random number generator must be seeded or re-seeded using
* C_SeedRandom. */§pkcs11t.h:260
/* CKF_ASYNC_SESSION_SUPPORTED. If this is true the token
* supports asynchronous sessions. */§pkcs11t.h:267
/* CK_SESSION_HANDLE is a Cryptoki-assigned value that
* identifies a session
*/§pkcs11t.h:275
/* CK_USER_TYPE enumerates the types of Cryptoki users */§pkcs11t.h:277
/* Security Officer */§pkcs11t.h:279
/* Normal user */§pkcs11t.h:281
/* Context specific */§pkcs11t.h:284
/* CK_STATE enumerates the session states */§pkcs11t.h:292
/* CK_SESSION_INFO provides information about a session */§pkcs11t.h:296
/* see below */§pkcs11t.h:297
/* device-dependent error code */§pkcs11t.h:300
/* The flags are defined in the following table:
* Bit Flag Mask Meaning
*/§pkcs11t.h:303
/* session is r/w */§pkcs11t.h:304
/* no parallel */§pkcs11t.h:305
/* session is async */§pkcs11t.h:310
/* CK_OBJECT_HANDLE is a token-specific identifier for an
* object
*/§pkcs11t.h:318
/* CK_OBJECT_CLASS is a value that identifies the classes (or
* types) of objects that Cryptoki recognizes. It is defined
* as follows:
*/§pkcs11t.h:324
/* The following classes of objects are defined: */§pkcs11t.h:342
/* Profile ID's */§pkcs11t.h:343
/* Profile */§pkcs11t.h:344
/* Profile */§pkcs11t.h:345
/* Profile */§pkcs11t.h:346
/* Profile */§pkcs11t.h:347
/* Profile */§pkcs11t.h:348
/* Profile */§pkcs11t.h:349
/* Profile */§pkcs11t.h:350
/* Profile */§pkcs11t.h:353
/* CK_HW_FEATURE_TYPE is a value that identifies the hardware feature type
* of an object with CK_OBJECT_CLASS equal to CKO_HW_FEATURE.
*/§pkcs11t.h:358
/* The following hardware feature types are defined */§pkcs11t.h:364
/* CK_KEY_TYPE is a value that identifies a key type */§pkcs11t.h:367
/* the following key types are defined: */§pkcs11t.h:371
/* Deprecated */§pkcs11t.h:374
/* Historical */§pkcs11t.h:376
/* Historical */§pkcs11t.h:377
/* Historical */§pkcs11t.h:378
/* Historical */§pkcs11t.h:381
/* Historical */§pkcs11t.h:382
/* Historical */§pkcs11t.h:383
/* Deprecated */§pkcs11t.h:384
/* Historical */§pkcs11t.h:385
/* Historical */§pkcs11t.h:386
/* Historical */§pkcs11t.h:387
/* Historical */§pkcs11t.h:388
/* Historical */§pkcs11t.h:389
/* Historical */§pkcs11t.h:390
/* Historical */§pkcs11t.h:395
/* Historical */§pkcs11t.h:396
/* Historical */§pkcs11t.h:400
/* the following definitions were added in the 2.30 header file,
* but never defined in the spec. */§pkcs11t.h:402
/* Historical */§pkcs11t.h:404
/* Historical */§pkcs11t.h:405
/* Historical */§pkcs11t.h:447
/* CK_CERTIFICATE_TYPE is a value that identifies a certificate
* type
*/§pkcs11t.h:463
/* The following certificate types are defined: */§pkcs11t.h:470
/* CK_ATTRIBUTE_TYPE is a value that identifies an attribute
* type
*/§pkcs11t.h:475
/* The CKF_ARRAY_ATTRIBUTE flag identifies an attribute which
* consists of an array of values.
*/§pkcs11t.h:480
/* The following OTP-related defines relate to the CKA_OTP_FORMAT attribute */§pkcs11t.h:486
/* The following OTP-related defines relate to the CKA_OTP_..._REQUIREMENT
* attributes
*/§pkcs11t.h:493
/* The following attribute types are defined: */§pkcs11t.h:563
/* Deprecated */§pkcs11t.h:568
/* Deprecated */§pkcs11t.h:569
/* Deprecated */§pkcs11t.h:635
/* HSS */§pkcs11t.h:642
/* new post-quantum (general) */§pkcs11t.h:644
/* validation objects */§pkcs11t.h:657
/* KEM */§pkcs11t.h:660
/* trust objects */§pkcs11t.h:671
/* linking pubic and private keys */§pkcs11t.h:673
/* new post-quantum (general) */§pkcs11t.h:678
/* CK_ATTRIBUTE is a structure that includes the type, length
* and value of an attribute
*/§pkcs11t.h:684
/* in bytes */§pkcs11t.h:689
/* CK_DATE is a structure that defines a date */§pkcs11t.h:691
/* the year ("1900" - "9999") */§pkcs11t.h:692
/* the month ("01" - "12") */§pkcs11t.h:693
/* the day ("01" - "31") */§pkcs11t.h:697
/* CK_MECHANISM_TYPE is a value that identifies a mechanism
* type
*/§pkcs11t.h:702
/* the following mechanism types are defined: */§pkcs11t.h:775
/* Historical */§pkcs11t.h:776
/* Historical */§pkcs11t.h:777
/* Historical */§pkcs11t.h:778
/* Historical */§pkcs11t.h:780
/* Historical */§pkcs11t.h:781
/* Historical */§pkcs11t.h:783
/* Historical */§pkcs11t.h:784
/* Historical */§pkcs11t.h:785
/* Historical */§pkcs11t.h:786
/* Historical */§pkcs11t.h:787
/* Historical */§pkcs11t.h:788
/* Historical */§pkcs11t.h:790
/* Historical */§pkcs11t.h:791
/* Historical */§pkcs11t.h:803
/* Historical */§pkcs11t.h:804
/* Historical */§pkcs11t.h:805
/* Historical */§pkcs11t.h:806
/* Historical */§pkcs11t.h:807
/* Historical */§pkcs11t.h:808
/* Historical */§pkcs11t.h:815
/* Historical */§pkcs11t.h:817
/* Historical */§pkcs11t.h:818
/* Historical */§pkcs11t.h:820
/* Historical */§pkcs11t.h:822
/* Historical */§pkcs11t.h:823
/* Historical */§pkcs11t.h:830
/* Historical */§pkcs11t.h:831
/* Historical */§pkcs11t.h:832
/* Historical */§pkcs11t.h:833
/* Historical */§pkcs11t.h:834
/* Historical */§pkcs11t.h:835
/* Historical */§pkcs11t.h:874
/* Historical */§pkcs11t.h:875
/* Historical */§pkcs11t.h:876
/* Historical */§pkcs11t.h:877
/* Historical */§pkcs11t.h:878
/* Historical */§pkcs11t.h:879
/* Historical */§pkcs11t.h:880
/* Historical */§pkcs11t.h:881
/* Historical */§pkcs11t.h:882
/* Historical */§pkcs11t.h:883
/* Historical */§pkcs11t.h:884
/* Historical */§pkcs11t.h:885
/* Historical */§pkcs11t.h:886
/* Note that CAST128 and CAST5 are the same algorithm */§pkcs11t.h:887
/* Historical */§pkcs11t.h:888
/* Historical */§pkcs11t.h:889
/* Historical */§pkcs11t.h:890
/* Historical */§pkcs11t.h:891
/* Deprecated */§pkcs11t.h:892
/* Historical */§pkcs11t.h:893
/* Deprecated */§pkcs11t.h:894
/* Historical */§pkcs11t.h:895
/* Deprecated */§pkcs11t.h:896
/* Historical */§pkcs11t.h:897
/* Deprecated */§pkcs11t.h:898
/* Historical */§pkcs11t.h:899
/* Historical */§pkcs11t.h:900
/* Historical */§pkcs11t.h:901
/* Historical */§pkcs11t.h:902
/* Historical */§pkcs11t.h:903
/* Historical */§pkcs11t.h:904
/* Historical */§pkcs11t.h:905
/* Historical */§pkcs11t.h:906
/* Historical */§pkcs11t.h:907
/* Historical */§pkcs11t.h:908
/* Historical */§pkcs11t.h:909
/* Historical */§pkcs11t.h:910
/* Historical */§pkcs11t.h:931
/* Historical */§pkcs11t.h:932
/* Historical */§pkcs11t.h:952
/* Historical */§pkcs11t.h:953
/* Historical */§pkcs11t.h:954
/* Historical */§pkcs11t.h:955
/* Historical */§pkcs11t.h:956
/* Deprecated */§pkcs11t.h:957
/* Historical */§pkcs11t.h:958
/* Deprecated */§pkcs11t.h:959
/* Historical */§pkcs11t.h:960
/* Historical */§pkcs11t.h:961
/* Historical */§pkcs11t.h:1005
/* Historical */§pkcs11t.h:1025
/* Historical */§pkcs11t.h:1026
/* Historical */§pkcs11t.h:1027
/* Historical */§pkcs11t.h:1028
/* Historical */§pkcs11t.h:1029
/* Historical */§pkcs11t.h:1030
/* Historical */§pkcs11t.h:1031
/* Historical */§pkcs11t.h:1032
/* Historical */§pkcs11t.h:1033
/* Historical */§pkcs11t.h:1034
/* Historical */§pkcs11t.h:1035
/* Historical */§pkcs11t.h:1036
/* Historical */§pkcs11t.h:1037
/* Historical */§pkcs11t.h:1038
/* Historical */§pkcs11t.h:1039
/* Historical */§pkcs11t.h:1040
/* Historical */§pkcs11t.h:1041
/* Historical */§pkcs11t.h:1042
/* Historical */§pkcs11t.h:1043
/* Historical */§pkcs11t.h:1044
/* Historical */§pkcs11t.h:1045
/* Historical */§pkcs11t.h:1046
/* Historical */§pkcs11t.h:1048
/* Deprecated */§pkcs11t.h:1066
/* Historical */§pkcs11t.h:1067
/* Historical */§pkcs11t.h:1068
/* Historical */§pkcs11t.h:1069
/* Historical */§pkcs11t.h:1070
/* Historical */§pkcs11t.h:1071
/* Historical */§pkcs11t.h:1127
/* Depricated */§pkcs11t.h:1137
/* WAS: 0x00001090 */§pkcs11t.h:1138
/* WAS: 0x00001091 */§pkcs11t.h:1255
/* CK_MECHANISM is a structure that specifies a particular
* mechanism
*/§pkcs11t.h:1261
/* in bytes */§pkcs11t.h:1267
/* CK_MECHANISM_INFO provides information about a particular
* mechanism
*/§pkcs11t.h:1276
/* The flags are defined as follows:
* Bit Flag Mask Meaning */§pkcs11t.h:1278
/* performed by HW */§pkcs11t.h:1280
/* Specify whether or not a mechanism can be used for a particular task */§pkcs11t.h:1302
/* Describe a token's EC capabilities not available in mechanism
* information.
*/§pkcs11t.h:1309
/* deprecated since PKCS#11 3.00 */§pkcs11t.h:1321
/* CK_RV is a value that identifies the return value of a
* Cryptoki function
*/§pkcs11t.h:1460
/* CK_NOTIFY is an application callback that processes events */§pkcs11t.h:1462
/* the session's handle */§pkcs11t.h:1464
/* passed to C_OpenSession */§pkcs11t.h:1468
/* CK_FUNCTION_LIST is a structure holding a Cryptoki spec
* version and pointers of appropriate types to all the
* Cryptoki functions
*/§pkcs11t.h:1496
/* CK_CREATEMUTEX is an application callback for creating a
* mutex object
*/§pkcs11t.h:1500
/* location to receive ptr to mutex */§pkcs11t.h:1504
/* CK_DESTROYMUTEX is an application callback for destroying a
* mutex object
*/§pkcs11t.h:1508
/* pointer to mutex */§pkcs11t.h:1512
/* CK_LOCKMUTEX is an application callback for locking a mutex */§pkcs11t.h:1514
/* pointer to mutex */§pkcs11t.h:1518
/* CK_UNLOCKMUTEX is an application callback for unlocking a
* mutex
*/§pkcs11t.h:1522
/* pointer to mutex */§pkcs11t.h:1525
/* Get functionlist flags */§pkcs11t.h:1528
/* CK_C_INITIALIZE_ARGS provides the optional arguments to
* C_Initialize
*/§pkcs11t.h:1540
/* flags: bit flags that provide capabilities of the slot
* Bit Flag Mask Meaning
*/§pkcs11t.h:1550
/* additional flags for parameters to functions */§pkcs11t.h:1552
/* CKF_DONT_BLOCK is for the function C_WaitForSlotEvent */§pkcs11t.h:1555
/* CK_RSA_PKCS_MGF_TYPE is used to indicate the Message
* Generation Function (MGF) applied to a message block when
* formatting a message block for the PKCS #1 OAEP encryption
* scheme.
*/§pkcs11t.h:1564
/* The following MGFs are defined */§pkcs11t.h:1576
/* CK_RSA_PKCS_OAEP_SOURCE_TYPE is used to indicate the source
* of the encoding parameter when formatting a message block
* for the PKCS #1 OAEP encryption scheme.
*/§pkcs11t.h:1584
/* The following encoding parameter sources are defined */§pkcs11t.h:1587
/* CK_RSA_PKCS_OAEP_PARAMS provides the parameters to the
* CKM_RSA_PKCS_OAEP mechanism.
*/§pkcs11t.h:1600
/* CK_RSA_PKCS_PSS_PARAMS provides the parameters to the
* CKM_RSA_PKCS_PSS mechanism(s).
*/§pkcs11t.h:1614
/* The following EC Key Derivation Functions are defined */§pkcs11t.h:1618
/* The following X9.42 DH key derivation functions are defined */§pkcs11t.h:1644
/* CK_ECDH1_DERIVE_PARAMS provides the parameters to the
* CKM_ECDH1_DERIVE and CKM_ECDH1_COFACTOR_DERIVE mechanisms,
* where each party contributes one key pair.
*/§pkcs11t.h:1658
/*
* CK_ECDH2_DERIVE_PARAMS provides the parameters to the
* CKM_ECMQV_DERIVE mechanism, where each party contributes two key pairs.
*/§pkcs11t.h:1691
/* Typedefs and defines for the CKM_X9_42_DH_KEY_PAIR_GEN and the
* CKM_X9_42_DH_PARAMETER_GEN mechanisms
*/§pkcs11t.h:1697
/* CK_X9_42_DH1_DERIVE_PARAMS provides the parameters to the
* CKM_X9_42_DH_DERIVE key derivation mechanism, where each party
* contributes one key pair
*/§pkcs11t.h:1711
/* CK_X9_42_DH2_DERIVE_PARAMS provides the parameters to the
* CKM_X9_42_DH_HYBRID_DERIVE and CKM_X9_42_MQV_DERIVE key derivation
* mechanisms, where each party contributes two key pairs
*/§pkcs11t.h:1744
/* CK_KEA_DERIVE_PARAMS provides the parameters to the
* CKM_KEA_DERIVE mechanism
*/§pkcs11t.h:1759
/* CK_RC2_PARAMS provides the parameters to the CKM_RC2_ECB and
* CKM_RC2_MAC mechanisms. An instance of CK_RC2_PARAMS just
* holds the effective keysize
*/§pkcs11t.h:1768
/* CK_RC2_CBC_PARAMS provides the parameters to the CKM_RC2_CBC
* mechanism
*/§pkcs11t.h:1772
/* effective bits (1-1024) */§pkcs11t.h:1773
/* IV for CBC mode */§pkcs11t.h:1779
/* CK_RC2_MAC_GENERAL_PARAMS provides the parameters for the
* CKM_RC2_MAC_GENERAL mechanism
*/§pkcs11t.h:1783
/* effective bits (1-1024) */§pkcs11t.h:1784
/* Length of MAC in bytes */§pkcs11t.h:1791
/* CK_RC5_PARAMS provides the parameters to the CKM_RC5_ECB and
* CKM_RC5_MAC mechanisms
*/§pkcs11t.h:1795
/* wordsize in bits */§pkcs11t.h:1796
/* number of rounds */§pkcs11t.h:1802
/* CK_RC5_CBC_PARAMS provides the parameters to the CKM_RC5_CBC
* mechanism
*/§pkcs11t.h:1806
/* wordsize in bits */§pkcs11t.h:1807
/* number of rounds */§pkcs11t.h:1808
/* pointer to IV */§pkcs11t.h:1809
/* length of IV in bytes */§pkcs11t.h:1815
/* CK_RC5_MAC_GENERAL_PARAMS provides the parameters for the
* CKM_RC5_MAC_GENERAL mechanism
*/§pkcs11t.h:1819
/* wordsize in bits */§pkcs11t.h:1820
/* number of rounds */§pkcs11t.h:1821
/* Length of MAC in bytes */§pkcs11t.h:1827
/* CK_MAC_GENERAL_PARAMS provides the parameters to most block
* ciphers' MAC_GENERAL mechanisms. Its value is the length of
* the MAC
*/§pkcs11t.h:1851
/* CK_SKIPJACK_PRIVATE_WRAP_PARAMS provides the parameters to the
* CKM_SKIPJACK_PRIVATE_WRAP mechanism
*/§pkcs11t.h:1872
/* CK_SKIPJACK_RELAYX_PARAMS provides the parameters to the
* CKM_SKIPJACK_RELAYX mechanism
*/§pkcs11t.h:1908
/* CK_KEY_WRAP_SET_OAEP_PARAMS provides the parameters to the
* CKM_KEY_WRAP_SET_OAEP mechanism
*/§pkcs11t.h:1912
/* block contents byte */§pkcs11t.h:1913
/* extra data */§pkcs11t.h:1914
/* length of extra data in bytes */§pkcs11t.h:2042
/* The CK_EXTRACT_PARAMS is used for the
* CKM_EXTRACT_KEY_FROM_KEY mechanism. It specifies which bit
* of the base key should be used as the first bit of the
* derived key
*/§pkcs11t.h:2051
/* CK_PKCS5_PBKD2_PSEUDO_RANDOM_FUNCTION_TYPE is used to
* indicate the Pseudo-Random Function (PRF) used to generate
* key bits using PKCS #5 PBKDF2.
*/§pkcs11t.h:2069
/* CK_PKCS5_PBKDF2_SALT_SOURCE_TYPE is used to indicate the
* source of the salt value when deriving a key using PKCS #5
* PBKDF2.
*/§pkcs11t.h:2078
/* The following salt value sources are defined in PKCS #5 v2.0. */§pkcs11t.h:2081
/* CK_PKCS5_PBKD2_PARAMS is a structure that provides the
* parameters to the CKM_PKCS5_PBKD2 mechanism.
*/§pkcs11t.h:2098
/* CK_PKCS5_PBKD2_PARAMS2 is a corrected version of the CK_PKCS5_PBKD2_PARAMS
* structure that provides the parameters to the CKM_PKCS5_PBKD2 mechanism
* noting that the ulPasswordLen field is a CK_ULONG and not a CK_ULONG_PTR.
*/§pkcs11t.h:2117
/* backward compatibility */§pkcs11t.h:2226
/*plaintext or ciphertext*/§pkcs11t.h:2238
/*wrappedkey data*/§pkcs11t.h:2250
/* Deprecated. Use CK_GCM_PARAMS */§pkcs11t.h:2262
/* Deprecated. Use CK_CCM_PARAMS */§pkcs11t.h:2407
/*
* New PKCS 11 v3.0 data structures.
*/§pkcs11t.h:2414
/* Typedefs for Flexible KDF */§pkcs11t.h:2490
/* EDDSA */§pkcs11t.h:2499
/* Extended ChaCha20/Salsa20 support*/§pkcs11t.h:2538
/* X3dh, ratchet */§pkcs11t.h:2591
/* XEDDSA */§pkcs11t.h:2597
/* HKDF params */§pkcs11t.h:2615
/* HSS */§pkcs11t.h:2626
/* IKE Params */§pkcs11t.h:2670
/* async */§pkcs11t.h:2680
/* validation */§pkcs11t.h:2698
/* XMSS */§pkcs11t.h:2702
/* generic PQ mechanism parameters */§pkcs11t.h:2722
/* ML-DSA values for CKA_PARAMETER_SETS */§pkcs11t.h:2728
/* SLH-DSA values for CKA_PARAMETER_SETS */§pkcs11t.h:2743
/* ML-KEM values for CKA_PARAMETER_SETS */§pkcs11t.h:2749
/* Trust values for CKA_TRUST_* */§pkcs11t.h:2758
/* _PKCS11T_H_ */§pkcs11f.h:1
/* Copyright (c) OASIS Open 2016, 2019, 2024. All Rights Reserved./
* /Distributed under the terms of the OASIS IPR Policy,
* [http://www.oasis-open.org/policies-guidelines/ipr], AS-IS, WITHOUT ANY
* IMPLIED OR EXPRESS WARRANTY; there is no warranty of MERCHANTABILITY, FITNESS FOR A
* PARTICULAR PURPOSE or NONINFRINGEMENT of the rights of others.
*/§pkcs11f.h:8
/* Latest version of the specification:
* http://docs.oasis-open.org/pkcs11/pkcs11-spec/v3.2/pkcs11-spec-v3.2.html
*/§pkcs11f.h:12
/* This header file contains pretty much everything about all the
* Cryptoki function prototypes. Because this information is
* used for more than just declaring function prototypes, the
* order of the functions appearing herein is important, and
* should not be altered.
*/§pkcs11f.h:19
/* General-purpose */§pkcs11f.h:21
/* C_Initialize initializes the Cryptoki library. */§pkcs11f.h:25
/* if this is not NULL_PTR, it gets
* cast to CK_C_INITIALIZE_ARGS_PTR
* and dereferenced
*/§pkcs11f.h:33
/* C_Finalize indicates that an application is done with the
* Cryptoki library.
*/§pkcs11f.h:39
/* reserved. Should be NULL_PTR */§pkcs11f.h:44
/* C_GetInfo returns general information about Cryptoki. */§pkcs11f.h:48
/* location that receives information */§pkcs11f.h:53
/* C_GetFunctionList returns the function list. */§pkcs11f.h:57
/* receives pointer to
* function list
*/§pkcs11f.h:65
/* Slot and token management */§pkcs11f.h:67
/* C_GetSlotList obtains a list of slots in the system. */§pkcs11f.h:71
/* only slots with tokens */§pkcs11f.h:72
/* receives array of slot IDs */§pkcs11f.h:73
/* receives number of slots */§pkcs11f.h:78
/* C_GetSlotInfo obtains information about a particular slot in
* the system.
*/§pkcs11f.h:84
/* the ID of the slot */§pkcs11f.h:85
/* receives the slot information */§pkcs11f.h:90
/* C_GetTokenInfo obtains information about a particular token
* in the system.
*/§pkcs11f.h:96
/* ID of the token's slot */§pkcs11f.h:97
/* receives the token information */§pkcs11f.h:102
/* C_GetMechanismList obtains a list of mechanism types
* supported by a token.
*/§pkcs11f.h:108
/* ID of token's slot */§pkcs11f.h:109
/* gets mech. array */§pkcs11f.h:110
/* gets # of mechs. */§pkcs11f.h:115
/* C_GetMechanismInfo obtains information about a particular
* mechanism possibly supported by a token.
*/§pkcs11f.h:121
/* ID of the token's slot */§pkcs11f.h:122
/* type of mechanism */§pkcs11f.h:123
/* receives mechanism info */§pkcs11f.h:128
/* C_InitToken initializes a token. */§pkcs11f.h:132
/* ID of the token's slot */§pkcs11f.h:133
/* the SO's initial PIN */§pkcs11f.h:134
/* length in bytes of the PIN */§pkcs11f.h:135
/* 32-byte token label (blank padded) */§pkcs11f.h:140
/* C_InitPIN initializes the normal user's PIN. */§pkcs11f.h:144
/* the session's handle */§pkcs11f.h:145
/* the normal user's PIN */§pkcs11f.h:146
/* length in bytes of the PIN */§pkcs11f.h:151
/* C_SetPIN modifies the PIN of the user who is logged in. */§pkcs11f.h:155
/* the session's handle */§pkcs11f.h:156
/* the old PIN */§pkcs11f.h:157
/* length of the old PIN */§pkcs11f.h:158
/* the new PIN */§pkcs11f.h:159
/* length of the new PIN */§pkcs11f.h:165
/* Session management */§pkcs11f.h:167
/* C_OpenSession opens a session between an application and a
* token.
*/§pkcs11f.h:173
/* the slot's ID */§pkcs11f.h:174
/* from CK_SESSION_INFO */§pkcs11f.h:175
/* passed to callback */§pkcs11f.h:176
/* callback function */§pkcs11f.h:177
/* gets session handle */§pkcs11f.h:182
/* C_CloseSession closes a session between an application and a
* token.
*/§pkcs11f.h:188
/* the session's handle */§pkcs11f.h:193
/* C_CloseAllSessions closes all sessions with a token. */§pkcs11f.h:197
/* the token's slot */§pkcs11f.h:202
/* C_GetSessionInfo obtains information about the session. */§pkcs11f.h:206
/* the session's handle */§pkcs11f.h:207
/* receives session info */§pkcs11f.h:212
/* C_GetOperationState obtains the state of the cryptographic operation
* in a session.
*/§pkcs11f.h:218
/* session's handle */§pkcs11f.h:219
/* gets state */§pkcs11f.h:220
/* gets state length */§pkcs11f.h:225
/* C_SetOperationState restores the state of the cryptographic
* operation in a session.
*/§pkcs11f.h:231
/* session's handle */§pkcs11f.h:232
/* holds state */§pkcs11f.h:233
/* holds state length */§pkcs11f.h:234
/* en/decryption key */§pkcs11f.h:235
/* sign/verify key */§pkcs11f.h:240
/* C_Login logs a user into a token. */§pkcs11f.h:244
/* the session's handle */§pkcs11f.h:245
/* the user type */§pkcs11f.h:246
/* the user's PIN */§pkcs11f.h:247
/* the length of the PIN */§pkcs11f.h:252
/* C_Logout logs a user out from a token. */§pkcs11f.h:256
/* the session's handle */§pkcs11f.h:262
/* Object management */§pkcs11f.h:264
/* C_CreateObject creates a new object. */§pkcs11f.h:268
/* the session's handle */§pkcs11f.h:269
/* the object's template */§pkcs11f.h:270
/* attributes in template */§pkcs11f.h:271
/* gets new object's handle. */§pkcs11f.h:276
/* C_CopyObject copies an object, creating a new object for the
* copy.
*/§pkcs11f.h:282
/* the session's handle */§pkcs11f.h:283
/* the object's handle */§pkcs11f.h:284
/* template for new object */§pkcs11f.h:285
/* attributes in template */§pkcs11f.h:286
/* receives handle of copy */§pkcs11f.h:291
/* C_DestroyObject destroys an object. */§pkcs11f.h:295
/* the session's handle */§pkcs11f.h:296
/* the object's handle */§pkcs11f.h:301
/* C_GetObjectSize gets the size of an object in bytes. */§pkcs11f.h:305
/* the session's handle */§pkcs11f.h:306
/* the object's handle */§pkcs11f.h:307
/* receives size of object */§pkcs11f.h:312
/* C_GetAttributeValue obtains the value of one or more object
* attributes.
*/§pkcs11f.h:318
/* the session's handle */§pkcs11f.h:319
/* the object's handle */§pkcs11f.h:320
/* specifies attrs; gets vals */§pkcs11f.h:321
/* attributes in template */§pkcs11f.h:326
/* C_SetAttributeValue modifies the value of one or more object
* attributes.
*/§pkcs11f.h:332
/* the session's handle */§pkcs11f.h:333
/* the object's handle */§pkcs11f.h:334
/* specifies attrs and values */§pkcs11f.h:335
/* attributes in template */§pkcs11f.h:340
/* C_FindObjectsInit initializes a search for token and session
* objects that match a template.
*/§pkcs11f.h:346
/* the session's handle */§pkcs11f.h:347
/* attribute values to match */§pkcs11f.h:348
/* attrs in search template */§pkcs11f.h:353
/* C_FindObjects continues a search for token and session
* objects that match a template, obtaining additional object
* handles.
*/§pkcs11f.h:360
/* session's handle */§pkcs11f.h:361
/* gets obj. handles */§pkcs11f.h:362
/* max handles to get */§pkcs11f.h:363
/* actual # returned */§pkcs11f.h:368
/* C_FindObjectsFinal finishes a search for token and session
* objects.
*/§pkcs11f.h:374
/* the session's handle */§pkcs11f.h:380
/* Encryption and decryption */§pkcs11f.h:382
/* C_EncryptInit initializes an encryption operation. */§pkcs11f.h:386
/* the session's handle */§pkcs11f.h:387
/* the encryption mechanism */§pkcs11f.h:388
/* handle of encryption key */§pkcs11f.h:393
/* C_Encrypt encrypts single-part data. */§pkcs11f.h:397
/* session's handle */§pkcs11f.h:398
/* the plaintext data */§pkcs11f.h:399
/* bytes of plaintext */§pkcs11f.h:400
/* gets ciphertext */§pkcs11f.h:401
/* gets c-text size */§pkcs11f.h:406
/* C_EncryptUpdate continues a multiple-part encryption
* operation.
*/§pkcs11f.h:412
/* session's handle */§pkcs11f.h:413
/* the plaintext data */§pkcs11f.h:414
/* plaintext data len */§pkcs11f.h:415
/* gets ciphertext */§pkcs11f.h:416
/* gets c-text size */§pkcs11f.h:421
/* C_EncryptFinal finishes a multiple-part encryption
* operation.
*/§pkcs11f.h:427
/* session handle */§pkcs11f.h:428
/* last c-text */§pkcs11f.h:429
/* gets last size */§pkcs11f.h:434
/* C_DecryptInit initializes a decryption operation. */§pkcs11f.h:438
/* the session's handle */§pkcs11f.h:439
/* the decryption mechanism */§pkcs11f.h:440
/* handle of decryption key */§pkcs11f.h:445
/* C_Decrypt decrypts encrypted data in a single part. */§pkcs11f.h:449
/* session's handle */§pkcs11f.h:450
/* ciphertext */§pkcs11f.h:451
/* ciphertext length */§pkcs11f.h:452
/* gets plaintext */§pkcs11f.h:453
/* gets p-text size */§pkcs11f.h:458
/* C_DecryptUpdate continues a multiple-part decryption
* operation.
*/§pkcs11f.h:464
/* session's handle */§pkcs11f.h:465
/* encrypted data */§pkcs11f.h:466
/* input length */§pkcs11f.h:467
/* gets plaintext */§pkcs11f.h:468
/* p-text size */§pkcs11f.h:473
/* C_DecryptFinal finishes a multiple-part decryption
* operation.
*/§pkcs11f.h:479
/* the session's handle */§pkcs11f.h:480
/* gets plaintext */§pkcs11f.h:481
/* p-text size */§pkcs11f.h:487
/* Message digesting */§pkcs11f.h:489
/* C_DigestInit initializes a message-digesting operation. */§pkcs11f.h:493
/* the session's handle */§pkcs11f.h:494
/* the digesting mechanism */§pkcs11f.h:499
/* C_Digest digests data in a single part. */§pkcs11f.h:503
/* the session's handle */§pkcs11f.h:504
/* data to be digested */§pkcs11f.h:505
/* bytes of data to digest */§pkcs11f.h:506
/* gets the message digest */§pkcs11f.h:507
/* gets digest length */§pkcs11f.h:512
/* C_DigestUpdate continues a multiple-part message-digesting
* operation.
*/§pkcs11f.h:518
/* the session's handle */§pkcs11f.h:519
/* data to be digested */§pkcs11f.h:520
/* bytes of data to be digested */§pkcs11f.h:525
/* C_DigestKey continues a multi-part message-digesting
* operation, by digesting the value of a secret key as part of
* the data already digested.
*/§pkcs11f.h:532
/* the session's handle */§pkcs11f.h:533
/* secret key to digest */§pkcs11f.h:538
/* C_DigestFinal finishes a multiple-part message-digesting
* operation.
*/§pkcs11f.h:544
/* the session's handle */§pkcs11f.h:545
/* gets the message digest */§pkcs11f.h:546
/* gets byte count of digest */§pkcs11f.h:552
/* Signing and MACing */§pkcs11f.h:554
/* C_SignInit initializes a signature (private key encryption)
* operation, where the signature is (will be) an appendix to
* the data, and plaintext cannot be recovered from the
* signature.
*/§pkcs11f.h:562
/* the session's handle */§pkcs11f.h:563
/* the signature mechanism */§pkcs11f.h:564
/* handle of signature key */§pkcs11f.h:569
/* C_Sign signs (encrypts with private key) data in a single
* part, where the signature is (will be) an appendix to the
* data, and plaintext cannot be recovered from the signature.
*/§pkcs11f.h:576
/* the session's handle */§pkcs11f.h:577
/* the data to sign */§pkcs11f.h:578
/* count of bytes to sign */§pkcs11f.h:579
/* gets the signature */§pkcs11f.h:580
/* gets signature length */§pkcs11f.h:585
/* C_SignUpdate continues a multiple-part signature operation,
* where the signature is (will be) an appendix to the data,
* and plaintext cannot be recovered from the signature.
*/§pkcs11f.h:592
/* the session's handle */§pkcs11f.h:593
/* the data to sign */§pkcs11f.h:594
/* count of bytes to sign */§pkcs11f.h:599
/* C_SignFinal finishes a multiple-part signature operation,
* returning the signature.
*/§pkcs11f.h:605
/* the session's handle */§pkcs11f.h:606
/* gets the signature */§pkcs11f.h:607
/* gets signature length */§pkcs11f.h:612
/* C_SignRecoverInit initializes a signature operation, where
* the data can be recovered from the signature.
*/§pkcs11f.h:618
/* the session's handle */§pkcs11f.h:619
/* the signature mechanism */§pkcs11f.h:620
/* handle of the signature key */§pkcs11f.h:625
/* C_SignRecover signs data in a single operation, where the
* data can be recovered from the signature.
*/§pkcs11f.h:631
/* the session's handle */§pkcs11f.h:632
/* the data to sign */§pkcs11f.h:633
/* count of bytes to sign */§pkcs11f.h:634
/* gets the signature */§pkcs11f.h:635
/* gets signature length */§pkcs11f.h:641
/* Verifying signatures and MACs */§pkcs11f.h:643
/* C_VerifyInit initializes a verification operation, where the
* signature is an appendix to the data, and plaintext cannot
* cannot be recovered from the signature (e.g. DSA).
*/§pkcs11f.h:650
/* the session's handle */§pkcs11f.h:651
/* the verification mechanism */§pkcs11f.h:652
/* verification key */§pkcs11f.h:657
/* C_Verify verifies a signature in a single-part operation,
* where the signature is an appendix to the data, and plaintext
* cannot be recovered from the signature.
*/§pkcs11f.h:664
/* the session's handle */§pkcs11f.h:665
/* signed data */§pkcs11f.h:666
/* length of signed data */§pkcs11f.h:667
/* signature */§pkcs11f.h:668
/* signature length*/§pkcs11f.h:673
/* C_VerifyUpdate continues a multiple-part verification
* operation, where the signature is an appendix to the data,
* and plaintext cannot be recovered from the signature.
*/§pkcs11f.h:680
/* the session's handle */§pkcs11f.h:681
/* signed data */§pkcs11f.h:682
/* length of signed data */§pkcs11f.h:687
/* C_VerifyFinal finishes a multiple-part verification
* operation, checking the signature.
*/§pkcs11f.h:693
/* the session's handle */§pkcs11f.h:694
/* signature to verify */§pkcs11f.h:695
/* signature length */§pkcs11f.h:700
/* C_VerifyRecoverInit initializes a signature verification
* operation, where the data is recovered from the signature.
*/§pkcs11f.h:706
/* the session's handle */§pkcs11f.h:707
/* the verification mechanism */§pkcs11f.h:708
/* verification key */§pkcs11f.h:713
/* C_VerifyRecover verifies a signature in a single-part
* operation, where the data is recovered from the signature.
*/§pkcs11f.h:719
/* the session's handle */§pkcs11f.h:720
/* signature to verify */§pkcs11f.h:721
/* signature length */§pkcs11f.h:722
/* gets signed data */§pkcs11f.h:723
/* gets signed data len */§pkcs11f.h:729
/* Dual-function cryptographic operations */§pkcs11f.h:731
/* C_DigestEncryptUpdate continues a multiple-part digesting
* and encryption operation.
*/§pkcs11f.h:737
/* session's handle */§pkcs11f.h:738
/* the plaintext data */§pkcs11f.h:739
/* plaintext length */§pkcs11f.h:740
/* gets ciphertext */§pkcs11f.h:741
/* gets c-text length */§pkcs11f.h:746
/* C_DecryptDigestUpdate continues a multiple-part decryption and
* digesting operation.
*/§pkcs11f.h:752
/* session's handle */§pkcs11f.h:753
/* ciphertext */§pkcs11f.h:754
/* ciphertext length */§pkcs11f.h:755
/* gets plaintext */§pkcs11f.h:756
/* gets plaintext len */§pkcs11f.h:761
/* C_SignEncryptUpdate continues a multiple-part signing and
* encryption operation.
*/§pkcs11f.h:767
/* session's handle */§pkcs11f.h:768
/* the plaintext data */§pkcs11f.h:769
/* plaintext length */§pkcs11f.h:770
/* gets ciphertext */§pkcs11f.h:771
/* gets c-text length */§pkcs11f.h:776
/* C_DecryptVerifyUpdate continues a multiple-part decryption and
* verify operation.
*/§pkcs11f.h:782
/* session's handle */§pkcs11f.h:783
/* ciphertext */§pkcs11f.h:784
/* ciphertext length */§pkcs11f.h:785
/* gets plaintext */§pkcs11f.h:786
/* gets p-text length */§pkcs11f.h:792
/* Key management */§pkcs11f.h:794
/* C_GenerateKey generates a secret key, creating a new key
* object.
*/§pkcs11f.h:800
/* the session's handle */§pkcs11f.h:801
/* key generation mech. */§pkcs11f.h:802
/* template for new key */§pkcs11f.h:803
/* # of attrs in template */§pkcs11f.h:804
/* gets handle of new key */§pkcs11f.h:809
/* C_GenerateKeyPair generates a public-key/private-key pair,
* creating new key objects.
*/§pkcs11f.h:815
/* session handle */§pkcs11f.h:816
/* key-gen mech. */§pkcs11f.h:817
/* template for pub. key */§pkcs11f.h:818
/* # pub. attrs. */§pkcs11f.h:819
/* template for priv. key */§pkcs11f.h:820
/* # priv. attrs. */§pkcs11f.h:821
/* gets pub. key handle */§pkcs11f.h:822
/* gets priv. key handle */§pkcs11f.h:827
/* C_WrapKey wraps (i.e., encrypts) a key. */§pkcs11f.h:831
/* the session's handle */§pkcs11f.h:832
/* the wrapping mechanism */§pkcs11f.h:833
/* wrapping key */§pkcs11f.h:834
/* key to be wrapped */§pkcs11f.h:835
/* gets wrapped key */§pkcs11f.h:836
/* gets wrapped key size */§pkcs11f.h:841
/* C_UnwrapKey unwraps (decrypts) a wrapped key, creating a new
* key object.
*/§pkcs11f.h:847
/* session's handle */§pkcs11f.h:848
/* unwrapping mech. */§pkcs11f.h:849
/* unwrapping key */§pkcs11f.h:850
/* the wrapped key */§pkcs11f.h:851
/* wrapped key len */§pkcs11f.h:852
/* new key template */§pkcs11f.h:853
/* template length */§pkcs11f.h:854
/* gets new handle */§pkcs11f.h:859
/* C_DeriveKey derives a key from a base key, creating a new key
* object.
*/§pkcs11f.h:865
/* session's handle */§pkcs11f.h:866
/* key deriv. mech. */§pkcs11f.h:867
/* base key */§pkcs11f.h:868
/* new key template */§pkcs11f.h:869
/* template length */§pkcs11f.h:870
/* gets new handle */§pkcs11f.h:876
/* Random number generation */§pkcs11f.h:878
/* C_SeedRandom mixes additional seed material into the token's
* random number generator.
*/§pkcs11f.h:884
/* the session's handle */§pkcs11f.h:885
/* the seed material */§pkcs11f.h:886
/* length of seed material */§pkcs11f.h:891
/* C_GenerateRandom generates random data. */§pkcs11f.h:895
/* the session's handle */§pkcs11f.h:896
/* receives the random data */§pkcs11f.h:897
/* # of bytes to generate */§pkcs11f.h:903
/* Parallel function management */§pkcs11f.h:905
/* C_GetFunctionStatus is a legacy function; it obtains an
* updated status of a function running in parallel with an
* application.
*/§pkcs11f.h:912
/* the session's handle */§pkcs11f.h:917
/* C_CancelFunction is a legacy function; it cancels a function
* running in parallel.
*/§pkcs11f.h:923
/* the session's handle */§pkcs11f.h:928
/* C_WaitForSlotEvent waits for a slot event (token insertion,
* removal, etc.) to occur.
*/§pkcs11f.h:934
/* blocking/nonblocking flag */§pkcs11f.h:935
/* location that receives the slot ID */§pkcs11f.h:936
/* reserved. Should be NULL_PTR */§pkcs11f.h:941
/* C_GetInterfaceList returns all the interfaces supported by the module*/§pkcs11f.h:945
/* returned interfaces */§pkcs11f.h:946
/* number of interfaces returned */§pkcs11f.h:950
/* C_GetInterface returns a specific interface from the module. */§pkcs11f.h:954
/* name of the interface */§pkcs11f.h:955
/* version of the interface */§pkcs11f.h:956
/* returned interface */§pkcs11f.h:957
/* flags controlling the semantics
* of the interface */§pkcs11f.h:965
/* the session's handle */§pkcs11f.h:966
/* the user type */§pkcs11f.h:967
/* the user's PIN */§pkcs11f.h:968
/* the length of the PIN */§pkcs11f.h:969
/* the user's name */§pkcs11f.h:970
/*the length of the user's name */§pkcs11f.h:977
/* the session's handle */§pkcs11f.h:978
/* flags control which sessions are cancelled */§pkcs11f.h:985
/* the session's handle */§pkcs11f.h:986
/* the encryption mechanism */§pkcs11f.h:987
/* handle of encryption key */§pkcs11f.h:994
/* the session's handle */§pkcs11f.h:995
/* message specific parameter */§pkcs11f.h:996
/* length of message specific parameter */§pkcs11f.h:997
/* AEAD Associated data */§pkcs11f.h:998
/* AEAD Associated data length */§pkcs11f.h:999
/* plain text */§pkcs11f.h:1000
/* plain text length */§pkcs11f.h:1001
/* gets cipher text */§pkcs11f.h:1002
/* gets cipher text length */§pkcs11f.h:1009
/* the session's handle */§pkcs11f.h:1010
/* message specific parameter */§pkcs11f.h:1011
/* length of message specific parameter */§pkcs11f.h:1012
/* AEAD Associated data */§pkcs11f.h:1013
/* AEAD Associated data length */§pkcs11f.h:1020
/* the session's handle */§pkcs11f.h:1021
/* message specific parameter */§pkcs11f.h:1022
/* length of message specific parameter */§pkcs11f.h:1023
/* plain text */§pkcs11f.h:1024
/* plain text length */§pkcs11f.h:1025
/* gets cipher text */§pkcs11f.h:1026
/* gets cipher text length */§pkcs11f.h:1027
/* multi mode flag */§pkcs11f.h:1034
/* the session's handle */§pkcs11f.h:1041
/* the session's handle */§pkcs11f.h:1042
/* the decryption mechanism */§pkcs11f.h:1043
/* handle of decryption key */§pkcs11f.h:1050
/* the session's handle */§pkcs11f.h:1051
/* message specific parameter */§pkcs11f.h:1052
/* length of message specific parameter */§pkcs11f.h:1053
/* AEAD Associated data */§pkcs11f.h:1054
/* AEAD Associated data length */§pkcs11f.h:1055
/* cipher text */§pkcs11f.h:1056
/* cipher text length */§pkcs11f.h:1057
/* gets plain text */§pkcs11f.h:1058
/* gets plain text length */§pkcs11f.h:1065
/* the session's handle */§pkcs11f.h:1066
/* message specific parameter */§pkcs11f.h:1067
/* length of message specific parameter */§pkcs11f.h:1068
/* AEAD Associated data */§pkcs11f.h:1069
/* AEAD Associated data length */§pkcs11f.h:1076
/* the session's handle */§pkcs11f.h:1077
/* message specific parameter */§pkcs11f.h:1078
/* length of message specific parameter */§pkcs11f.h:1079
/* cipher text */§pkcs11f.h:1080
/* cipher text length */§pkcs11f.h:1081
/* gets plain text */§pkcs11f.h:1082
/* gets plain text length */§pkcs11f.h:1083
/* multi mode flag */§pkcs11f.h:1090
/* the session's handle */§pkcs11f.h:1097
/* the session's handle */§pkcs11f.h:1098
/* the signing mechanism */§pkcs11f.h:1099
/* handle of signing key */§pkcs11f.h:1106
/* the session's handle */§pkcs11f.h:1107
/* message specific parameter */§pkcs11f.h:1108
/* length of message specific parameter */§pkcs11f.h:1109
/* data to sign */§pkcs11f.h:1110
/* data to sign length */§pkcs11f.h:1111
/* gets signature */§pkcs11f.h:1112
/* gets signature length */§pkcs11f.h:1119
/* the session's handle */§pkcs11f.h:1120
/* message specific parameter */§pkcs11f.h:1121
/* length of message specific parameter */§pkcs11f.h:1128
/* the session's handle */§pkcs11f.h:1129
/* message specific parameter */§pkcs11f.h:1130
/* length of message specific parameter */§pkcs11f.h:1131
/* data to sign */§pkcs11f.h:1132
/* data to sign length */§pkcs11f.h:1133
/* gets signature */§pkcs11f.h:1134
/* gets signature length */§pkcs11f.h:1141
/* the session's handle */§pkcs11f.h:1148
/* the session's handle */§pkcs11f.h:1149
/* the signing mechanism */§pkcs11f.h:1150
/* handle of signing key */§pkcs11f.h:1157
/* the session's handle */§pkcs11f.h:1158
/* message specific parameter */§pkcs11f.h:1159
/* length of message specific parameter */§pkcs11f.h:1160
/* data to sign */§pkcs11f.h:1161
/* data to sign length */§pkcs11f.h:1162
/* signature */§pkcs11f.h:1163
/* signature length */§pkcs11f.h:1170
/* the session's handle */§pkcs11f.h:1171
/* message specific parameter */§pkcs11f.h:1172
/* length of message specific parameter */§pkcs11f.h:1179
/* the session's handle */§pkcs11f.h:1180
/* message specific parameter */§pkcs11f.h:1181
/* length of message specific parameter */§pkcs11f.h:1182
/* data to sign */§pkcs11f.h:1183
/* data to sign length */§pkcs11f.h:1184
/* signature */§pkcs11f.h:1185
/* signature length */§pkcs11f.h:1192
/* the session's handle */§pkcs11f.h:1200
/* the session's handle */§pkcs11f.h:1201
/* the encapsulation mechanism */§pkcs11f.h:1202
/* the encapsulating key */§pkcs11f.h:1203
/* new key template */§pkcs11f.h:1204
/* template length */§pkcs11f.h:1205
/* the wrapped key */§pkcs11f.h:1206
/* the wrapped key size */§pkcs11f.h:1207
/* the encapsulated key */§pkcs11f.h:1214
/* the session's handle */§pkcs11f.h:1215
/* the decapsulation mechanism */§pkcs11f.h:1216
/* the decapsulating key */§pkcs11f.h:1217
/* new key template */§pkcs11f.h:1218
/* template length */§pkcs11f.h:1219
/* the wrapped key */§pkcs11f.h:1220
/* the wrapped key size */§pkcs11f.h:1221
/* the decapsulated key */§pkcs11f.h:1228
/* the session's handle */§pkcs11f.h:1229
/* the verification mechanism */§pkcs11f.h:1230
/* verification key */§pkcs11f.h:1231
/* signature */§pkcs11f.h:1232
/* signature length */§pkcs11f.h:1239
/* the session's handle */§pkcs11f.h:1240
/* signed data */§pkcs11f.h:1241
/* length of signed data */§pkcs11f.h:1248
/* the session's handle */§pkcs11f.h:1249
/* signed data */§pkcs11f.h:1250
/* length of signed data */§pkcs11f.h:1257
/* the session's handle */§pkcs11f.h:1264
/* the session's handle */§pkcs11f.h:1265
/* which state of flags */§pkcs11f.h:1266
/* validation flags */§pkcs11f.h:1273
/* the session's handle */§pkcs11f.h:1274
/* pkcs11 function name */§pkcs11f.h:1275
/* operation result */§pkcs11f.h:1282
/* the session's handle */§pkcs11f.h:1283
/* pkcs11 function name */§pkcs11f.h:1284
/* persistent operation id */§pkcs11f.h:1291
/* the session's handle */§pkcs11f.h:1292
/* pkcs11 function name */§pkcs11f.h:1293
/* persistent operation id */§pkcs11f.h:1294
/* location for the data */§pkcs11f.h:1329
/* CK_PKCS11_3_0_ONLY */§pkcs11f.h:1330
/* CK_PKCS11_2_0_ONLY */Structs§
- CK_
AES_ CBC_ ENCRYPT_ DATA_ PARAMS - CK_
AES_ CCM_ PARAMS - CK_
AES_ CTR_ PARAMS - CK_
AES_ GCM_ PARAMS - CK_
ARIA_ CBC_ ENCRYPT_ DATA_ PARAMS - CK_
ASYNC_ DATA - CK_
ATTRIBUTE - CK_
CAMELLIA_ CBC_ ENCRYPT_ DATA_ PARAMS - CK_
CAMELLIA_ CTR_ PARAMS - CK_
CCM_ MESSAGE_ PARAMS - CK_
CCM_ PARAMS - CK_
CCM_ WRAP_ PARAMS - CK_
CHACH A20_ PARAMS - CK_
CMS_ SIG_ PARAMS - CK_
C_ INITIALIZE_ ARGS - CK_DATE
- CK_
DERIVED_ KEY - CK_
DES_ CBC_ ENCRYPT_ DATA_ PARAMS - CK_
DSA_ PARAMETER_ GEN_ PARAM - CK_
ECDH1_ DERIVE_ PARAMS - CK_
ECDH2_ DERIVE_ PARAMS - CK_
ECDH_ AES_ KEY_ WRAP_ PARAMS - CK_
ECMQV_ DERIVE_ PARAMS - CK_
EDDSA_ PARAMS - CK_
FUNCTION_ LIST - CK_
FUNCTION_ LIST_ 3_ 0 - CK_
FUNCTION_ LIST_ 3_ 2 - CK_
GCM_ MESSAGE_ PARAMS - CK_
GCM_ PARAMS - CK_
GCM_ WRAP_ PARAMS - CK_
GOST R3410_ DERIVE_ PARAMS - CK_
GOST R3410_ KEY_ WRAP_ PARAMS - CK_
HASH_ SIGN_ ADDITIONAL_ CONTEXT - CK_
HKDF_ PARAMS - CK_
IKE1_ EXTENDED_ DERIVE_ PARAMS - CK_
IKE1_ PRF_ DERIVE_ PARAMS - CK_
IKE2_ PRF_ PLUS_ DERIVE_ PARAMS - CK_
IKE_ PRF_ DERIVE_ PARAMS - CK_INFO
- CK_
INTERFACE - CK_
KEA_ DERIVE_ PARAMS - CK_
KEY_ DERIVATION_ STRING_ DATA - CK_
KEY_ WRAP_ SET_ OAEP_ PARAMS - CK_
KIP_ PARAMS - CK_
MECHANISM - CK_
MECHANISM_ INFO - CK_
OTP_ PARAM - CK_
OTP_ PARAMS - CK_
OTP_ SIGNATURE_ INFO - CK_
PBE_ PARAMS - CK_
PKCS5_ PBKD2_ PARAMS - CK_
PKCS5_ PBKD2_ PARAM S2 - CK_
PRF_ DATA_ PARAM - CK_
RC2_ CBC_ PARAMS - CK_
RC2_ MAC_ GENERAL_ PARAMS - CK_
RC5_ CBC_ PARAMS - CK_
RC5_ MAC_ GENERAL_ PARAMS - CK_
RC5_ PARAMS - CK_
RSA_ AES_ KEY_ WRAP_ PARAMS - CK_
RSA_ PKCS_ OAEP_ PARAMS - CK_
RSA_ PKCS_ PSS_ PARAMS - CK_
SALS A20_ CHACH A20_ POLY1305_ MSG_ PARAMS - CK_
SALS A20_ CHACH A20_ POLY1305_ PARAMS - CK_
SALS A20_ PARAMS - CK_
SEED_ CBC_ ENCRYPT_ DATA_ PARAMS - CK_
SESSION_ INFO - CK_
SIGN_ ADDITIONAL_ CONTEXT - CK_
SKIPJACK_ PRIVATE_ WRAP_ PARAMS - CK_
SKIPJACK_ RELAYX_ PARAMS - CK_
SLOT_ INFO - CK_
SP800_ 108_ COUNTER_ FORMAT - CK_
SP800_ 108_ DKM_ LENGTH_ FORMAT - CK_
SP800_ 108_ FEEDBACK_ KDF_ PARAMS - CK_
SP800_ 108_ KDF_ PARAMS - CK_
SSL3_ KEY_ MAT_ OUT - CK_
SSL3_ KEY_ MAT_ PARAMS - CK_
SSL3_ MASTER_ KEY_ DERIVE_ PARAMS - CK_
SSL3_ RANDOM_ DATA - CK_
TLS12_ EXTENDED_ MASTER_ KEY_ DERIVE_ PARAMS - CK_
TLS12_ KEY_ MAT_ PARAMS - CK_
TLS12_ MASTER_ KEY_ DERIVE_ PARAMS - CK_
TLS_ KDF_ PARAMS - CK_
TLS_ MAC_ PARAMS - CK_
TLS_ PRF_ PARAMS - CK_
TOKEN_ INFO - CK_
VERSION - CK_
WTLS_ KEY_ MAT_ OUT - CK_
WTLS_ KEY_ MAT_ PARAMS - CK_
WTLS_ MASTER_ KEY_ DERIVE_ PARAMS - CK_
WTLS_ PRF_ PARAMS - CK_
WTLS_ RANDOM_ DATA - CK_
X2RATCHET_ INITIALIZE_ PARAMS - CK_
X2RATCHET_ RESPOND_ PARAMS - CK_
X3DH_ INITIATE_ PARAMS - CK_
X3DH_ RESPOND_ PARAMS - CK_
X9_ 42_ DH1_ DERIVE_ PARAMS - CK_
X9_ 42_ DH2_ DERIVE_ PARAMS - CK_
X9_ 42_ MQV_ DERIVE_ PARAMS - CK_
XEDDSA_ PARAMS - specified
Params
Constants§
- CKA_
AC_ ISSUER - CKA_
ALLOWED_ MECHANISMS - CKA_
ALWAYS_ AUTHENTICATE - CKA_
ALWAYS_ SENSITIVE - CKA_
APPLICATION - CKA_
ATTR_ TYPES - CKA_
AUTH_ PIN_ FLAGS - CKA_
BASE - CKA_
BITS_ PER_ PIXEL - CKA_
CERTIFICATE_ CATEGORY - CKA_
CERTIFICATE_ TYPE - CKA_
CHAR_ COLUMNS - CKA_
CHAR_ ROWS - CKA_
CHAR_ SETS - CKA_
CHECK_ VALUE - CKA_
CLASS - CKA_
COEFFICIENT - CKA_
COLOR - CKA_
COPYABLE - CKA_
DECAPSULATE - CKA_
DECAPSULATE_ TEMPLATE - CKA_
DECRYPT - CKA_
DEFAULT_ CMS_ ATTRIBUTES - CKA_
DERIVE - CKA_
DERIVE_ TEMPLATE - CKA_
DESTROYABLE - CKA_
ECDSA_ PARAMS - CKA_
EC_ PARAMS - CKA_
EC_ POINT - CKA_
ENCAPSULATE - CKA_
ENCAPSULATE_ TEMPLATE - CKA_
ENCODING_ METHODS - CKA_
ENCRYPT - CKA_
END_ DATE - CKA_
EXPONENT_ 1 - CKA_
EXPONENT_ 2 - CKA_
EXTRACTABLE - CKA_
GOST28147_ PARAMS - CKA_
GOST R3410_ PARAMS - CKA_
GOST R3411_ PARAMS - CKA_
HASH_ OF_ CERTIFICATE - CKA_
HASH_ OF_ ISSUER_ PUBLIC_ KEY - CKA_
HASH_ OF_ SUBJECT_ PUBLIC_ KEY - CKA_
HAS_ RESET - CKA_
HSS_ KEYS_ REMAINING - CKA_
HSS_ LEVELS - CKA_
HSS_ LMOTS_ TYPE - CKA_
HSS_ LMOTS_ TYPES - CKA_
HSS_ LMS_ TYPE - CKA_
HSS_ LMS_ TYPES - CKA_
HW_ FEATURE_ TYPE - CKA_ID
- CKA_
ISSUER - CKA_
JAVA_ MIDP_ SECURITY_ DOMAIN - CKA_
KEY_ GEN_ MECHANISM - CKA_
KEY_ TYPE - CKA_
LABEL - CKA_
LOCAL - CKA_
MECHANISM_ TYPE - CKA_
MIME_ TYPES - CKA_
MODIFIABLE - CKA_
MODULUS - CKA_
MODULUS_ BITS - CKA_
NAME_ HASH_ ALGORITHM - CKA_
NEVER_ EXTRACTABLE - CKA_
OBJECT_ ID - CKA_
OBJECT_ VALIDATION_ FLAGS - CKA_
OTP_ CHALLENGE_ REQUIREMENT - CKA_
OTP_ COUNTER - CKA_
OTP_ COUNTER_ REQUIREMENT - CKA_
OTP_ FORMAT - CKA_
OTP_ LENGTH - CKA_
OTP_ PIN_ REQUIREMENT - CKA_
OTP_ SERVICE_ IDENTIFIER - CKA_
OTP_ SERVICE_ LOGO - CKA_
OTP_ SERVICE_ LOGO_ TYPE - CKA_
OTP_ TIME - CKA_
OTP_ TIME_ INTERVAL - CKA_
OTP_ TIME_ REQUIREMENT - CKA_
OTP_ USER_ FRIENDLY_ MODE - CKA_
OTP_ USER_ IDENTIFIER - CKA_
OWNER - CKA_
PARAMETER_ SET - CKA_
PIXEL_ X - CKA_
PIXEL_ Y - CKA_
PRIME - CKA_
PRIME_ 1 - CKA_
PRIME_ 2 - CKA_
PRIME_ BITS - CKA_
PRIVATE - CKA_
PRIVATE_ EXPONENT - CKA_
PROFILE_ ID - CKA_
PUBLIC_ CRC64_ VALUE - CKA_
PUBLIC_ EXPONENT - CKA_
PUBLIC_ KEY_ INFO - CKA_
REQUIRED_ CMS_ ATTRIBUTES - CKA_
RESET_ ON_ INIT - CKA_
RESOLUTION - CKA_
SECONDARY_ AUTH - CKA_
SEED - CKA_
SENSITIVE - CKA_
SERIAL_ NUMBER - CKA_
SIGN - CKA_
SIGN_ RECOVER - CKA_
START_ DATE - CKA_
SUBJECT - CKA_
SUBPRIME - CKA_
SUBPRIME_ BITS - CKA_
SUB_ PRIME_ BITS - CKA_
SUPPORTED_ CMS_ ATTRIBUTES - CKA_
TOKEN - CKA_
TRUSTED - CKA_
TRUST_ CLIENT_ AUTH - CKA_
TRUST_ CODE_ SIGNING - CKA_
TRUST_ EMAIL_ PROTECTION - CKA_
TRUST_ IPSEC_ IKE - CKA_
TRUST_ OCSP_ SIGNING - CKA_
TRUST_ SERVER_ AUTH - CKA_
TRUST_ TIME_ STAMPING - CKA_
UNIQUE_ ID - CKA_
UNWRAP - CKA_
UNWRAP_ TEMPLATE - CKA_URL
- CKA_
VALIDATION_ AUTHORITY_ TYPE - CKA_
VALIDATION_ CERTIFICATE_ IDENTIFIER - CKA_
VALIDATION_ CERTIFICATE_ URI - CKA_
VALIDATION_ COUNTRY - CKA_
VALIDATION_ FLAG - CKA_
VALIDATION_ LEVEL - CKA_
VALIDATION_ MODULE_ ID - CKA_
VALIDATION_ PROFILE - CKA_
VALIDATION_ TYPE - CKA_
VALIDATION_ VENDOR_ URI - CKA_
VALIDATION_ VERSION - CKA_
VALUE - CKA_
VALUE_ BITS - CKA_
VALUE_ LEN - CKA_
VENDOR_ DEFINED - CKA_
VERIFY - CKA_
VERIFY_ RECOVER - CKA_
WRAP - CKA_
WRAP_ TEMPLATE - CKA_
WRAP_ WITH_ TRUSTED - CKA_
X2RATCHET_ BAG - CKA_
X2RATCHET_ BAGSIZE - CKA_
X2RATCHET_ BOBS1STMSG - CKA_
X2RATCHET_ CKR - CKA_
X2RATCHET_ CKS - CKA_
X2RATCHET_ DHP - CKA_
X2RATCHET_ DHR - CKA_
X2RATCHET_ DHS - CKA_
X2RATCHET_ HKR - CKA_
X2RATCHET_ HKS - CKA_
X2RATCHET_ ISALICE - CKA_
X2RATCHET_ NHKR - CKA_
X2RATCHET_ NHKS - CKA_
X2RATCHET_ NR - CKA_
X2RATCHET_ NS - CKA_
X2RATCHET_ PNS - CKA_
X2RATCHET_ RK - CKC_
VENDOR_ DEFINED - CKC_
WTLS - CKC_
X_ 509 - CKC_
X_ 509_ ATTR_ CERT - CKD_
BLAK E2B_ 160_ KDF - CKD_
BLAK E2B_ 256_ KDF - CKD_
BLAK E2B_ 384_ KDF - CKD_
BLAK E2B_ 512_ KDF - CKD_
CPDIVERSIFY_ KDF - CKD_
NULL - CKD_
SHA1_ KDF - CKD_
SHA1_ KDF_ ASN1 - CKD_
SHA1_ KDF_ CONCATENATE - CKD_
SHA1_ KDF_ SP800 - CKD_
SHA3_ 224_ KDF - CKD_
SHA3_ 224_ KDF_ SP800 - CKD_
SHA3_ 256_ KDF - CKD_
SHA3_ 256_ KDF_ SP800 - CKD_
SHA3_ 384_ KDF - CKD_
SHA3_ 384_ KDF_ SP800 - CKD_
SHA3_ 512_ KDF - CKD_
SHA3_ 512_ KDF_ SP800 - CKD_
SHA224_ KDF - CKD_
SHA224_ KDF_ SP800 - CKD_
SHA256_ KDF - CKD_
SHA256_ KDF_ SP800 - CKD_
SHA384_ KDF - CKD_
SHA384_ KDF_ SP800 - CKD_
SHA512_ KDF - CKD_
SHA512_ KDF_ SP800 - CKF_
ARRAY_ ATTRIBUTE - CKF_
ASYNC_ SESSION - CKF_
ASYNC_ SESSION_ SUPPORTED - CKF_
CLOCK_ ON_ TOKEN - CKF_
DECAPSULATE - CKF_
DECRYPT - CKF_
DERIVE - CKF_
DIGEST - CKF_
DONT_ BLOCK - CKF_
DUAL_ CRYPTO_ OPERATIONS - CKF_
EC_ COMPRESS - CKF_
EC_ CURVENAME - CKF_
EC_ ECPARAMETERS - CKF_
EC_ F_ 2M - CKF_
EC_ F_ P - CKF_
EC_ NAMEDCURVE - CKF_
EC_ OID - CKF_
EC_ UNCOMPRESS - CKF_
ENCAPSULATE - CKF_
ENCRYPT - CKF_
END_ OF_ MESSAGE - CKF_
ERROR_ STATE - CKF_
EXCLUDE_ CHALLENGE - CKF_
EXCLUDE_ COUNTER - CKF_
EXCLUDE_ PIN - CKF_
EXCLUDE_ TIME - CKF_
EXTENSION - CKF_
FIND_ OBJECTS - CKF_
GENERATE - CKF_
GENERATE_ KEY_ PAIR - CKF_
HKDF_ SALT_ DATA - CKF_
HKDF_ SALT_ KEY - CKF_
HKDF_ SALT_ NULL - CKF_HW
- CKF_
HW_ SLOT - CKF_
INTERFACE_ FORK_ SAFE - CKF_
LIBRARY_ CANT_ CREATE_ OS_ THREADS - CKF_
LOGIN_ REQUIRED - CKF_
MESSAGE_ DECRYPT - CKF_
MESSAGE_ ENCRYPT - CKF_
MESSAGE_ SIGN - CKF_
MESSAGE_ VERIFY - CKF_
MULTI_ MESSAGE - CKF_
MULTI_ MESSGE - CKF_
NEXT_ OTP - CKF_
OS_ LOCKING_ OK - CKF_
PROTECTED_ AUTHENTICATION_ PATH - CKF_
REMOVABLE_ DEVICE - CKF_
RESTORE_ KEY_ NOT_ NEEDED - CKF_RNG
- CKF_
RW_ SESSION - CKF_
SECONDARY_ AUTHENTICATION - CKF_
SEED_ RANDOM_ REQUIRED - CKF_
SERIAL_ SESSION - CKF_
SIGN - CKF_
SIGN_ RECOVER - CKF_
SO_ PIN_ COUNT_ LOW - CKF_
SO_ PIN_ FINAL_ TRY - CKF_
SO_ PIN_ LOCKED - CKF_
SO_ PIN_ TO_ BE_ CHANGED - CKF_
TOKEN_ INITIALIZED - CKF_
TOKEN_ PRESENT - CKF_
UNWRAP - CKF_
USER_ FRIENDLY_ OTP - CKF_
USER_ PIN_ COUNT_ LOW - CKF_
USER_ PIN_ FINAL_ TRY - CKF_
USER_ PIN_ INITIALIZED - CKF_
USER_ PIN_ LOCKED - CKF_
USER_ PIN_ TO_ BE_ CHANGED - CKF_
VERIFY - CKF_
VERIFY_ RECOVER - CKF_
WRAP - CKF_
WRITE_ PROTECTED - CKG_
GENERATE - CKG_
GENERATE_ COUNTER - CKG_
GENERATE_ COUNTER_ XOR - CKG_
GENERATE_ RANDOM - CKG_
MGF1_ SHA1 - CKG_
MGF1_ SHA3_ 224 - CKG_
MGF1_ SHA3_ 256 - CKG_
MGF1_ SHA3_ 384 - CKG_
MGF1_ SHA3_ 512 - CKG_
MGF1_ SHA224 - CKG_
MGF1_ SHA256 - CKG_
MGF1_ SHA384 - CKG_
MGF1_ SHA512 - CKG_
NO_ GENERATE - CKH_
CLOCK - CKH_
DETERMINISTIC_ REQUIRED - CKH_
HEDGE_ PREFERRED - CKH_
HEDGE_ REQUIRED - CKH_
MONOTONIC_ COUNTER - CKH_
USER_ INTERFACE - CKH_
VENDOR_ DEFINED - CKK_
ACTI - CKK_AES
- CKK_
AES_ XTS - CKK_
ARIA - CKK_
BATON - CKK_
BLAK E2B_ 160_ HMAC - CKK_
BLAK E2B_ 256_ HMAC - CKK_
BLAK E2B_ 384_ HMAC - CKK_
BLAK E2B_ 512_ HMAC - CKK_
BLOWFISH - CKK_
CAMELLIA - CKK_
CAST - CKK_
CAST3 - CKK_
CAST5 - CKK_
CAST128 - CKK_
CDMF - CKK_
CHACH A20 - CKK_DES
- CKK_
DES2 - CKK_
DES3 - CKK_DH
- CKK_DSA
- CKK_EC
- CKK_
ECDSA - CKK_
EC_ EDWARDS - CKK_
EC_ MONTGOMERY - CKK_
GENERIC_ SECRET - CKK_
GOST28147 - CKK_
GOST R3410 - CKK_
GOST R3411 - CKK_
HKDF - CKK_
HOTP - CKK_HSS
- CKK_
IDEA - CKK_
JUNIPER - CKK_KEA
- CKK_
MD5_ HMAC - CKK_
ML_ DSA - CKK_
ML_ KEM - CKK_
POLY1305 - CKK_RC2
- CKK_RC4
- CKK_RC5
- CKK_
RIPEM D128_ HMAC - CKK_
RIPEM D160_ HMAC - CKK_RSA
- CKK_
SALS A20 - CKK_
SECURID - CKK_
SEED - CKK_
SHA3_ 224_ HMAC - CKK_
SHA3_ 256_ HMAC - CKK_
SHA3_ 384_ HMAC - CKK_
SHA3_ 512_ HMAC - CKK_
SHA224_ HMAC - CKK_
SHA256_ HMAC - CKK_
SHA384_ HMAC - CKK_
SHA512_ 224_ HMAC - CKK_
SHA512_ 256_ HMAC - CKK_
SHA512_ HMAC - CKK_
SHA512_ T_ HMAC - CKK_
SHA_ 1_ HMAC - CKK_
SKIPJACK - CKK_
SLH_ DSA - CKK_
TWOFISH - CKK_
VENDOR_ DEFINED - CKK_
X2RATCHET - CKK_
X9_ 42_ DH - CKK_
XMSS - CKK_
XMSSMT - CKM_
ACTI - CKM_
ACTI_ KEY_ GEN - CKM_
AES_ CBC - CKM_
AES_ CBC_ ENCRYPT_ DATA - CKM_
AES_ CBC_ PAD - CKM_
AES_ CCM - CKM_
AES_ CFB1 - CKM_
AES_ CFB8 - CKM_
AES_ CFB64 - CKM_
AES_ CFB128 - CKM_
AES_ CMAC - CKM_
AES_ CMAC_ GENERAL - CKM_
AES_ CTR - CKM_
AES_ CTS - CKM_
AES_ ECB - CKM_
AES_ ECB_ ENCRYPT_ DATA - CKM_
AES_ GCM - CKM_
AES_ GMAC - CKM_
AES_ KEY_ GEN - CKM_
AES_ KEY_ WRAP - CKM_
AES_ KEY_ WRAP_ KWP - CKM_
AES_ KEY_ WRAP_ PAD - CKM_
AES_ KEY_ WRAP_ PKCS7 - CKM_
AES_ MAC - CKM_
AES_ MAC_ GENERAL - CKM_
AES_ OFB - CKM_
AES_ XCBC_ MAC - CKM_
AES_ XCBC_ MAC_ 96 - CKM_
AES_ XTS - CKM_
AES_ XTS_ KEY_ GEN - CKM_
ARIA_ CBC - CKM_
ARIA_ CBC_ ENCRYPT_ DATA - CKM_
ARIA_ CBC_ PAD - CKM_
ARIA_ ECB - CKM_
ARIA_ ECB_ ENCRYPT_ DATA - CKM_
ARIA_ KEY_ GEN - CKM_
ARIA_ MAC - CKM_
ARIA_ MAC_ GENERAL - CKM_
BATON_ CBC128 - CKM_
BATON_ COUNTER - CKM_
BATON_ ECB96 - CKM_
BATON_ ECB128 - CKM_
BATON_ KEY_ GEN - CKM_
BATON_ SHUFFLE - CKM_
BATON_ WRAP - CKM_
BLAK E2B_ 160 - CKM_
BLAK E2B_ 256 - CKM_
BLAK E2B_ 384 - CKM_
BLAK E2B_ 512 - CKM_
BLAK E2B_ 160_ HMAC - CKM_
BLAK E2B_ 160_ HMAC_ GENERAL - CKM_
BLAK E2B_ 160_ KEY_ DERIVE - CKM_
BLAK E2B_ 160_ KEY_ GEN - CKM_
BLAK E2B_ 256_ HMAC - CKM_
BLAK E2B_ 256_ HMAC_ GENERAL - CKM_
BLAK E2B_ 256_ KEY_ DERIVE - CKM_
BLAK E2B_ 256_ KEY_ GEN - CKM_
BLAK E2B_ 384_ HMAC - CKM_
BLAK E2B_ 384_ HMAC_ GENERAL - CKM_
BLAK E2B_ 384_ KEY_ DERIVE - CKM_
BLAK E2B_ 384_ KEY_ GEN - CKM_
BLAK E2B_ 512_ HMAC - CKM_
BLAK E2B_ 512_ HMAC_ GENERAL - CKM_
BLAK E2B_ 512_ KEY_ DERIVE - CKM_
BLAK E2B_ 512_ KEY_ GEN - CKM_
BLOWFISH_ CBC - CKM_
BLOWFISH_ CBC_ PAD - CKM_
BLOWFISH_ KEY_ GEN - CKM_
CAMELLIA_ CBC - CKM_
CAMELLIA_ CBC_ ENCRYPT_ DATA - CKM_
CAMELLIA_ CBC_ PAD - CKM_
CAMELLIA_ CTR - CKM_
CAMELLIA_ ECB - CKM_
CAMELLIA_ ECB_ ENCRYPT_ DATA - CKM_
CAMELLIA_ KEY_ GEN - CKM_
CAMELLIA_ MAC - CKM_
CAMELLIA_ MAC_ GENERAL - CKM_
CAST3_ CBC - CKM_
CAST3_ CBC_ PAD - CKM_
CAST3_ ECB - CKM_
CAST3_ KEY_ GEN - CKM_
CAST3_ MAC - CKM_
CAST3_ MAC_ GENERAL - CKM_
CAST5_ CBC - CKM_
CAST5_ CBC_ PAD - CKM_
CAST5_ ECB - CKM_
CAST5_ KEY_ GEN - CKM_
CAST5_ MAC - CKM_
CAST5_ MAC_ GENERAL - CKM_
CAST128_ CBC - CKM_
CAST128_ CBC_ PAD - CKM_
CAST128_ ECB - CKM_
CAST128_ KEY_ GEN - CKM_
CAST128_ MAC - CKM_
CAST128_ MAC_ GENERAL - CKM_
CAST_ CBC - CKM_
CAST_ CBC_ PAD - CKM_
CAST_ ECB - CKM_
CAST_ KEY_ GEN - CKM_
CAST_ MAC - CKM_
CAST_ MAC_ GENERAL - CKM_
CDMF_ CBC - CKM_
CDMF_ CBC_ PAD - CKM_
CDMF_ ECB - CKM_
CDMF_ KEY_ GEN - CKM_
CDMF_ MAC - CKM_
CDMF_ MAC_ GENERAL - CKM_
CHACH A20 - CKM_
CHACH A20_ KEY_ GEN - CKM_
CHACH A20_ POLY1305 - CKM_
CMS_ SIG - CKM_
CONCATENATE_ BASE_ AND_ DATA - CKM_
CONCATENATE_ BASE_ AND_ KEY - CKM_
CONCATENATE_ DATA_ AND_ BASE - CKM_
DES2_ KEY_ GEN - CKM_
DES3_ CBC - CKM_
DES3_ CBC_ ENCRYPT_ DATA - CKM_
DES3_ CBC_ PAD - CKM_
DES3_ CMAC - CKM_
DES3_ CMAC_ GENERAL - CKM_
DES3_ ECB - CKM_
DES3_ ECB_ ENCRYPT_ DATA - CKM_
DES3_ KEY_ GEN - CKM_
DES3_ MAC - CKM_
DES3_ MAC_ GENERAL - CKM_
DES_ CBC - CKM_
DES_ CBC_ ENCRYPT_ DATA - CKM_
DES_ CBC_ PAD - CKM_
DES_ CFB8 - CKM_
DES_ CFB64 - CKM_
DES_ ECB - CKM_
DES_ ECB_ ENCRYPT_ DATA - CKM_
DES_ KEY_ GEN - CKM_
DES_ MAC - CKM_
DES_ MAC_ GENERAL - CKM_
DES_ OFB8 - CKM_
DES_ OFB64 - CKM_
DH_ PKCS_ DERIVE - CKM_
DH_ PKCS_ KEY_ PAIR_ GEN - CKM_
DH_ PKCS_ PARAMETER_ GEN - CKM_DSA
- CKM_
DSA_ FIPS_ G_ GEN - CKM_
DSA_ KEY_ PAIR_ GEN - CKM_
DSA_ PARAMETER_ GEN - CKM_
DSA_ PROBABILISTIC_ PARAMETER_ GEN - CKM_
DSA_ PROBABLISTIC_ PARAMETER_ GEN - CKM_
DSA_ SHA1 - CKM_
DSA_ SHA3_ 224 - CKM_
DSA_ SHA3_ 256 - CKM_
DSA_ SHA3_ 384 - CKM_
DSA_ SHA3_ 512 - CKM_
DSA_ SHA224 - CKM_
DSA_ SHA256 - CKM_
DSA_ SHA384 - CKM_
DSA_ SHA512 - CKM_
DSA_ SHAWE_ TAYLOR_ PARAMETER_ GEN - CKM_
ECDH1_ COFACTOR_ DERIVE - CKM_
ECDH1_ DERIVE - CKM_
ECDH_ AES_ KEY_ WRAP - CKM_
ECDH_ COF_ AES_ KEY_ WRAP - CKM_
ECDH_ X_ AES_ KEY_ WRAP - CKM_
ECDSA - CKM_
ECDSA_ KEY_ PAIR_ GEN - CKM_
ECDSA_ SHA1 - CKM_
ECDSA_ SHA3_ 224 - CKM_
ECDSA_ SHA3_ 256 - CKM_
ECDSA_ SHA3_ 384 - CKM_
ECDSA_ SHA3_ 512 - CKM_
ECDSA_ SHA224 - CKM_
ECDSA_ SHA256 - CKM_
ECDSA_ SHA384 - CKM_
ECDSA_ SHA512 - CKM_
ECMQV_ DERIVE - CKM_
EC_ EDWARDS_ KEY_ PAIR_ GEN - CKM_
EC_ KEY_ PAIR_ GEN - CKM_
EC_ KEY_ PAIR_ GEN_ W_ EXTRA_ BITS - CKM_
EC_ MONTGOMERY_ KEY_ PAIR_ GEN - CKM_
EDDSA - CKM_
EXTRACT_ KEY_ FROM_ KEY - CKM_
FASTHASH - CKM_
FORTEZZA_ TIMESTAMP - CKM_
GENERIC_ SECRET_ KEY_ GEN - CKM_
GOST28147 - CKM_
GOST28147_ ECB - CKM_
GOST28147_ KEY_ GEN - CKM_
GOST28147_ KEY_ WRAP - CKM_
GOST28147_ MAC - CKM_
GOST R3410 - CKM_
GOST R3411 - CKM_
GOST R3410_ DERIVE - CKM_
GOST R3410_ KEY_ PAIR_ GEN - CKM_
GOST R3410_ KEY_ WRAP - CKM_
GOST R3410_ WITH_ GOST R3411 - CKM_
GOST R3411_ HMAC - CKM_
HASH_ ML_ DSA - CKM_
HASH_ ML_ DSA_ SHA3_ 224 - CKM_
HASH_ ML_ DSA_ SHA3_ 256 - CKM_
HASH_ ML_ DSA_ SHA3_ 384 - CKM_
HASH_ ML_ DSA_ SHA3_ 512 - CKM_
HASH_ ML_ DSA_ SHA224 - CKM_
HASH_ ML_ DSA_ SHA256 - CKM_
HASH_ ML_ DSA_ SHA384 - CKM_
HASH_ ML_ DSA_ SHA512 - CKM_
HASH_ ML_ DSA_ SHAK E128 - CKM_
HASH_ ML_ DSA_ SHAK E256 - CKM_
HASH_ SLH_ DSA - CKM_
HASH_ SLH_ DSA_ SHA3_ 224 - CKM_
HASH_ SLH_ DSA_ SHA3_ 256 - CKM_
HASH_ SLH_ DSA_ SHA3_ 384 - CKM_
HASH_ SLH_ DSA_ SHA3_ 512 - CKM_
HASH_ SLH_ DSA_ SHA224 - CKM_
HASH_ SLH_ DSA_ SHA256 - CKM_
HASH_ SLH_ DSA_ SHA384 - CKM_
HASH_ SLH_ DSA_ SHA512 - CKM_
HASH_ SLH_ DSA_ SHAK E128 - CKM_
HASH_ SLH_ DSA_ SHAK E256 - CKM_
HKDF_ DATA - CKM_
HKDF_ DERIVE - CKM_
HKDF_ KEY_ GEN - CKM_
HOTP - CKM_
HOTP_ KEY_ GEN - CKM_HSS
- CKM_
HSS_ KEY_ PAIR_ GEN - CKM_
IDEA_ CBC - CKM_
IDEA_ CBC_ PAD - CKM_
IDEA_ ECB - CKM_
IDEA_ KEY_ GEN - CKM_
IDEA_ MAC - CKM_
IDEA_ MAC_ GENERAL - CKM_
IKE1_ EXTENDED_ DERIVE - CKM_
IKE1_ PRF_ DERIVE - CKM_
IKE2_ PRF_ PLUS_ DERIVE - CKM_
IKE_ PRF_ DERIVE - CKM_
JUNIPER_ CBC128 - CKM_
JUNIPER_ COUNTER - CKM_
JUNIPER_ ECB128 - CKM_
JUNIPER_ KEY_ GEN - CKM_
JUNIPER_ SHUFFLE - CKM_
JUNIPER_ WRAP - CKM_
KEA_ DERIVE - CKM_
KEA_ KEY_ DERIVE - CKM_
KEA_ KEY_ PAIR_ GEN - CKM_
KEY_ WRAP_ LYNKS - CKM_
KEY_ WRAP_ SET_ OAEP - CKM_
KIP_ DERIVE - CKM_
KIP_ MAC - CKM_
KIP_ WRAP - CKM_MD2
- CKM_MD5
- CKM_
MD2_ HMAC - CKM_
MD2_ HMAC_ GENERAL - CKM_
MD2_ KEY_ DERIVATION - CKM_
MD2_ RSA_ PKCS - CKM_
MD5_ HMAC - CKM_
MD5_ HMAC_ GENERAL - CKM_
MD5_ KEY_ DERIVATION - CKM_
MD5_ RSA_ PKCS - CKM_
ML_ DSA - CKM_
ML_ DSA_ KEY_ PAIR_ GEN - CKM_
ML_ KEM - CKM_
ML_ KEM_ KEY_ PAIR_ GEN - CKM_
NULL - CKM_
PBA_ SHA1_ WITH_ SHA1_ HMAC - CKM_
PBE_ MD2_ DES_ CBC - CKM_
PBE_ MD5_ CAST3_ CBC - CKM_
PBE_ MD5_ CAST5_ CBC - CKM_
PBE_ MD5_ CAST128_ CBC - CKM_
PBE_ MD5_ CAST_ CBC - CKM_
PBE_ MD5_ DES_ CBC - CKM_
PBE_ SHA1_ CAST5_ CBC - CKM_
PBE_ SHA1_ CAST128_ CBC - CKM_
PBE_ SHA1_ DES2_ EDE_ CBC - CKM_
PBE_ SHA1_ DES3_ EDE_ CBC - CKM_
PBE_ SHA1_ RC2_ 40_ CBC - CKM_
PBE_ SHA1_ RC2_ 128_ CBC - CKM_
PBE_ SHA1_ RC4_ 40 - CKM_
PBE_ SHA1_ RC4_ 128 - CKM_
PKCS5_ PBKD2 - CKM_
POLY1305 - CKM_
POLY1305_ KEY_ GEN - CKM_
PUB_ KEY_ FROM_ PRIV_ KEY - CKM_RC4
- CKM_
RC2_ CBC - CKM_
RC2_ CBC_ PAD - CKM_
RC2_ ECB - CKM_
RC2_ KEY_ GEN - CKM_
RC2_ MAC - CKM_
RC2_ MAC_ GENERAL - CKM_
RC4_ KEY_ GEN - CKM_
RC5_ CBC - CKM_
RC5_ CBC_ PAD - CKM_
RC5_ ECB - CKM_
RC5_ KEY_ GEN - CKM_
RC5_ MAC - CKM_
RC5_ MAC_ GENERAL - CKM_
RIPEM D128 - CKM_
RIPEM D160 - CKM_
RIPEM D128_ HMAC - CKM_
RIPEM D128_ HMAC_ GENERAL - CKM_
RIPEM D128_ RSA_ PKCS - CKM_
RIPEM D160_ HMAC - CKM_
RIPEM D160_ HMAC_ GENERAL - CKM_
RIPEM D160_ RSA_ PKCS - CKM_
RSA_ 9796 - CKM_
RSA_ AES_ KEY_ WRAP - CKM_
RSA_ PKCS - CKM_
RSA_ PKCS_ KEY_ PAIR_ GEN - CKM_
RSA_ PKCS_ OAEP - CKM_
RSA_ PKCS_ OAEP_ TPM_ 1_ 1 - CKM_
RSA_ PKCS_ PSS - CKM_
RSA_ PKCS_ TPM_ 1_ 1 - CKM_
RSA_ X9_ 31 - CKM_
RSA_ X9_ 31_ KEY_ PAIR_ GEN - CKM_
RSA_ X_ 509 - CKM_
SALS A20 - CKM_
SALS A20_ KEY_ GEN - CKM_
SALS A20_ POLY1305 - CKM_
SECURID - CKM_
SECURID_ KEY_ GEN - CKM_
SEED_ CBC - CKM_
SEED_ CBC_ ENCRYPT_ DATA - CKM_
SEED_ CBC_ PAD - CKM_
SEED_ ECB - CKM_
SEED_ ECB_ ENCRYPT_ DATA - CKM_
SEED_ KEY_ GEN - CKM_
SEED_ MAC - CKM_
SEED_ MAC_ GENERAL - CKM_
SHA1_ KEY_ DERIVATION - CKM_
SHA1_ RSA_ PKCS - CKM_
SHA1_ RSA_ PKCS_ PSS - CKM_
SHA1_ RSA_ X9_ 31 - CKM_
SHA3_ 224 - CKM_
SHA3_ 256 - CKM_
SHA3_ 384 - CKM_
SHA3_ 512 - CKM_
SHA3_ 224_ HMAC - CKM_
SHA3_ 224_ HMAC_ GENERAL - CKM_
SHA3_ 224_ KEY_ DERIVATION - CKM_
SHA3_ 224_ KEY_ DERIVE - CKM_
SHA3_ 224_ KEY_ GEN - CKM_
SHA3_ 224_ RSA_ PKCS - CKM_
SHA3_ 224_ RSA_ PKCS_ PSS - CKM_
SHA3_ 256_ HMAC - CKM_
SHA3_ 256_ HMAC_ GENERAL - CKM_
SHA3_ 256_ KEY_ DERIVATION - CKM_
SHA3_ 256_ KEY_ DERIVE - CKM_
SHA3_ 256_ KEY_ GEN - CKM_
SHA3_ 256_ RSA_ PKCS - CKM_
SHA3_ 256_ RSA_ PKCS_ PSS - CKM_
SHA3_ 384_ HMAC - CKM_
SHA3_ 384_ HMAC_ GENERAL - CKM_
SHA3_ 384_ KEY_ DERIVATION - CKM_
SHA3_ 384_ KEY_ DERIVE - CKM_
SHA3_ 384_ KEY_ GEN - CKM_
SHA3_ 384_ RSA_ PKCS - CKM_
SHA3_ 384_ RSA_ PKCS_ PSS - CKM_
SHA3_ 512_ HMAC - CKM_
SHA3_ 512_ HMAC_ GENERAL - CKM_
SHA3_ 512_ KEY_ DERIVATION - CKM_
SHA3_ 512_ KEY_ DERIVE - CKM_
SHA3_ 512_ KEY_ GEN - CKM_
SHA3_ 512_ RSA_ PKCS - CKM_
SHA3_ 512_ RSA_ PKCS_ PSS - CKM_
SHA224 - CKM_
SHA256 - CKM_
SHA384 - CKM_
SHA512 - CKM_
SHA224_ HMAC - CKM_
SHA224_ HMAC_ GENERAL - CKM_
SHA224_ KEY_ DERIVATION - CKM_
SHA224_ KEY_ GEN - CKM_
SHA224_ RSA_ PKCS - CKM_
SHA224_ RSA_ PKCS_ PSS - CKM_
SHA256_ HMAC - CKM_
SHA256_ HMAC_ GENERAL - CKM_
SHA256_ KEY_ DERIVATION - CKM_
SHA256_ KEY_ GEN - CKM_
SHA256_ RSA_ PKCS - CKM_
SHA256_ RSA_ PKCS_ PSS - CKM_
SHA384_ HMAC - CKM_
SHA384_ HMAC_ GENERAL - CKM_
SHA384_ KEY_ DERIVATION - CKM_
SHA384_ KEY_ GEN - CKM_
SHA384_ RSA_ PKCS - CKM_
SHA384_ RSA_ PKCS_ PSS - CKM_
SHA512_ 224 - CKM_
SHA512_ 256 - CKM_
SHA512_ 224_ HMAC - CKM_
SHA512_ 224_ HMAC_ GENERAL - CKM_
SHA512_ 224_ KEY_ DERIVATION - CKM_
SHA512_ 224_ KEY_ GEN - CKM_
SHA512_ 256_ HMAC - CKM_
SHA512_ 256_ HMAC_ GENERAL - CKM_
SHA512_ 256_ KEY_ DERIVATION - CKM_
SHA512_ 256_ KEY_ GEN - CKM_
SHA512_ HMAC - CKM_
SHA512_ HMAC_ GENERAL - CKM_
SHA512_ KEY_ DERIVATION - CKM_
SHA512_ KEY_ GEN - CKM_
SHA512_ RSA_ PKCS - CKM_
SHA512_ RSA_ PKCS_ PSS - CKM_
SHA512_ T - CKM_
SHA512_ T_ HMAC - CKM_
SHA512_ T_ HMAC_ GENERAL - CKM_
SHA512_ T_ KEY_ DERIVATION - CKM_
SHA512_ T_ KEY_ GEN - CKM_
SHAKE_ 128_ KEY_ DERIVATION - CKM_
SHAKE_ 128_ KEY_ DERIVE - CKM_
SHAKE_ 256_ KEY_ DERIVATION - CKM_
SHAKE_ 256_ KEY_ DERIVE - CKM_
SHA_ 1 - CKM_
SHA_ 1_ HMAC - CKM_
SHA_ 1_ HMAC_ GENERAL - CKM_
SHA_ 1_ KEY_ GEN - CKM_
SKIPJACK_ CBC64 - CKM_
SKIPJACK_ CFB8 - CKM_
SKIPJACK_ CFB16 - CKM_
SKIPJACK_ CFB32 - CKM_
SKIPJACK_ CFB64 - CKM_
SKIPJACK_ ECB64 - CKM_
SKIPJACK_ KEY_ GEN - CKM_
SKIPJACK_ OFB64 - CKM_
SKIPJACK_ PRIVATE_ WRAP - CKM_
SKIPJACK_ RELAYX - CKM_
SKIPJACK_ WRAP - CKM_
SLH_ DSA - CKM_
SLH_ DSA_ KEY_ PAIR_ GEN - CKM_
SP800_ 108_ COUNTER_ KDF - CKM_
SP800_ 108_ DOUBLE_ PIPELINE_ KDF - CKM_
SP800_ 108_ FEEDBACK_ KDF - CKM_
SSL3_ KEY_ AND_ MAC_ DERIVE - CKM_
SSL3_ MASTER_ KEY_ DERIVE - CKM_
SSL3_ MASTER_ KEY_ DERIVE_ DH - CKM_
SSL3_ MD5_ MAC - CKM_
SSL3_ PRE_ MASTER_ KEY_ GEN - CKM_
SSL3_ SHA1_ MAC - CKM_
TLS10_ MAC_ CLIENT - CKM_
TLS10_ MAC_ SERVER - CKM_
TLS12_ EXTENDED_ MASTER_ KEY_ DERIVE - CKM_
TLS12_ EXTENDED_ MASTER_ KEY_ DERIVE_ DH - CKM_
TLS12_ KDF - CKM_
TLS12_ KEY_ AND_ MAC_ DERIVE - CKM_
TLS12_ KEY_ SAFE_ DERIVE - CKM_
TLS12_ MAC - CKM_
TLS12_ MASTER_ KEY_ DERIVE - CKM_
TLS12_ MASTER_ KEY_ DERIVE_ DH - CKM_
TLS_ KDF - CKM_
TLS_ KEY_ AND_ MAC_ DERIVE - CKM_
TLS_ MAC - CKM_
TLS_ MASTER_ KEY_ DERIVE - CKM_
TLS_ MASTER_ KEY_ DERIVE_ DH - CKM_
TLS_ PRE_ MASTER_ KEY_ GEN - CKM_
TLS_ PRF - CKM_
TWOFISH_ CBC - CKM_
TWOFISH_ CBC_ PAD - CKM_
TWOFISH_ KEY_ GEN - CKM_
VENDOR_ DEFINED - CKM_
WTLS_ CLIENT_ KEY_ AND_ MAC_ DERIVE - CKM_
WTLS_ MASTER_ KEY_ DERIVE - CKM_
WTLS_ MASTER_ KEY_ DERIVE_ DH_ ECC - CKM_
WTLS_ PRE_ MASTER_ KEY_ GEN - CKM_
WTLS_ PRF - CKM_
WTLS_ SERVER_ KEY_ AND_ MAC_ DERIVE - CKM_
X2RATCHET_ DECRYPT - CKM_
X2RATCHET_ ENCRYPT - CKM_
X2RATCHET_ INITIALIZE - CKM_
X2RATCHET_ RESPOND - CKM_
X3DH_ INITIALIZE - CKM_
X3DH_ RESPOND - CKM_
X9_ 42_ DH_ DERIVE - CKM_
X9_ 42_ DH_ HYBRID_ DERIVE - CKM_
X9_ 42_ DH_ KEY_ PAIR_ GEN - CKM_
X9_ 42_ DH_ PARAMETER_ GEN - CKM_
X9_ 42_ MQV_ DERIVE - CKM_
XEDDSA - CKM_
XMSS - CKM_
XMSSMT - CKM_
XMSSMT_ KEY_ PAIR_ GEN - CKM_
XMSS_ KEY_ PAIR_ GEN - CKM_
XOR_ BASE_ AND_ DATA - CKN_
OTP_ CHANGED - CKN_
SURRENDER - CKO_
CERTIFICATE - CKO_
DATA - CKO_
DOMAIN_ PARAMETERS - CKO_
HW_ FEATURE - CKO_
MECHANISM - CKO_
OTP_ KEY - CKO_
PRIVATE_ KEY - CKO_
PROFILE - CKO_
PUBLIC_ KEY - CKO_
SECRET_ KEY - CKO_
TRUST - CKO_
VALIDATION - CKO_
VENDOR_ DEFINED - CKP_
AUTHENTICATION_ TOKEN - CKP_
BASELINE_ PROVIDER - CKP_
COMPLETE_ PROVIDER - CKP_
EXTENDED_ PROVIDER - CKP_
HKDF_ TLS_ TOKEN - CKP_
INVALID_ ID - CKP_
ML_ DSA_ 44 - CKP_
ML_ DSA_ 65 - CKP_
ML_ DSA_ 87 - CKP_
ML_ KEM_ 512 - CKP_
ML_ KEM_ 768 - CKP_
ML_ KEM_ 1024 - CKP_
PKCS5_ PBKD2_ HMAC_ GOST R3411 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA1 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA224 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA256 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA384 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA512 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA512_ 224 - CKP_
PKCS5_ PBKD2_ HMAC_ SHA512_ 256 - CKP_
PUBLIC_ CERTIFICATES_ TOKEN - CKP_
SLH_ DSA_ SHA2_ 128F - CKP_
SLH_ DSA_ SHA2_ 128S - CKP_
SLH_ DSA_ SHA2_ 192F - CKP_
SLH_ DSA_ SHA2_ 192S - CKP_
SLH_ DSA_ SHA2_ 256F - CKP_
SLH_ DSA_ SHA2_ 256S - CKP_
SLH_ DSA_ SHAKE_ 128F - CKP_
SLH_ DSA_ SHAKE_ 128S - CKP_
SLH_ DSA_ SHAKE_ 192F - CKP_
SLH_ DSA_ SHAKE_ 192S - CKP_
SLH_ DSA_ SHAKE_ 256F - CKP_
SLH_ DSA_ SHAKE_ 256S - CKP_
VENDOR_ DEFINED - CKR_
ACTION_ PROHIBITED - CKR_
AEAD_ DECRYPT_ FAILED - CKR_
ARGUMENTS_ BAD - CKR_
ATTRIBUTE_ READ_ ONLY - CKR_
ATTRIBUTE_ SENSITIVE - CKR_
ATTRIBUTE_ TYPE_ INVALID - CKR_
ATTRIBUTE_ VALUE_ INVALID - CKR_
BUFFER_ TOO_ SMALL - CKR_
CANCEL - CKR_
CANT_ LOCK - CKR_
CRYPTOKI_ ALREADY_ INITIALIZED - CKR_
CRYPTOKI_ NOT_ INITIALIZED - CKR_
CURVE_ NOT_ SUPPORTED - CKR_
DATA_ INVALID - CKR_
DATA_ LEN_ RANGE - CKR_
DEVICE_ ERROR - CKR_
DEVICE_ MEMORY - CKR_
DEVICE_ REMOVED - CKR_
DOMAIN_ PARAMS_ INVALID - CKR_
ENCRYPTED_ DATA_ INVALID - CKR_
ENCRYPTED_ DATA_ LEN_ RANGE - CKR_
EXCEEDED_ MAX_ ITERATIONS - CKR_
FIPS_ SELF_ TEST_ FAILED - CKR_
FUNCTION_ CANCELED - CKR_
FUNCTION_ FAILED - CKR_
FUNCTION_ NOT_ PARALLEL - CKR_
FUNCTION_ NOT_ SUPPORTED - CKR_
FUNCTION_ REJECTED - CKR_
GENERAL_ ERROR - CKR_
HOST_ MEMORY - CKR_
INFORMATION_ SENSITIVE - CKR_
KEY_ CHANGED - CKR_
KEY_ EXHAUSTED - CKR_
KEY_ FUNCTION_ NOT_ PERMITTED - CKR_
KEY_ HANDLE_ INVALID - CKR_
KEY_ INDIGESTIBLE - CKR_
KEY_ NEEDED - CKR_
KEY_ NOT_ NEEDED - CKR_
KEY_ NOT_ WRAPPABLE - CKR_
KEY_ SIZE_ RANGE - CKR_
KEY_ TYPE_ INCONSISTENT - CKR_
KEY_ UNEXTRACTABLE - CKR_
LIBRARY_ LOAD_ FAILED - CKR_
MECHANISM_ INVALID - CKR_
MECHANISM_ PARAM_ INVALID - CKR_
MUTEX_ BAD - CKR_
MUTEX_ NOT_ LOCKED - CKR_
NEED_ TO_ CREATE_ THREADS - CKR_
NEW_ PIN_ MODE - CKR_
NEXT_ OTP - CKR_
NO_ EVENT - CKR_
OBJECT_ HANDLE_ INVALID - CKR_OK
- CKR_
OPERATION_ ACTIVE - CKR_
OPERATION_ CANCEL_ FAILED - CKR_
OPERATION_ NOT_ INITIALIZED - CKR_
OPERATION_ NOT_ VALIDATED - CKR_
PARAMETER_ SET_ NOT_ SUPPORTED - CKR_
PENDING - CKR_
PIN_ EXPIRED - CKR_
PIN_ INCORRECT - CKR_
PIN_ INVALID - CKR_
PIN_ LEN_ RANGE - CKR_
PIN_ LOCKED - CKR_
PIN_ TOO_ WEAK - CKR_
PUBLIC_ KEY_ INVALID - CKR_
RANDOM_ NO_ RNG - CKR_
RANDOM_ SEED_ NOT_ SUPPORTED - CKR_
SAVED_ STATE_ INVALID - CKR_
SEED_ RANDOM_ REQUIRED - CKR_
SESSION_ ASYNC_ NOT_ SUPPORTED - CKR_
SESSION_ CLOSED - CKR_
SESSION_ COUNT - CKR_
SESSION_ EXISTS - CKR_
SESSION_ HANDLE_ INVALID - CKR_
SESSION_ PARALLEL_ NOT_ SUPPORTED - CKR_
SESSION_ READ_ ONLY - CKR_
SESSION_ READ_ ONLY_ EXISTS - CKR_
SESSION_ READ_ WRITE_ SO_ EXISTS - CKR_
SIGNATURE_ INVALID - CKR_
SIGNATURE_ LEN_ RANGE - CKR_
SLOT_ ID_ INVALID - CKR_
STATE_ UNSAVEABLE - CKR_
TEMPLATE_ INCOMPLETE - CKR_
TEMPLATE_ INCONSISTENT - CKR_
TOKEN_ NOT_ INITIALIZED - CKR_
TOKEN_ NOT_ PRESENT - CKR_
TOKEN_ NOT_ RECOGNIZED - CKR_
TOKEN_ RESOURCE_ EXCEEDED - CKR_
TOKEN_ WRITE_ PROTECTED - CKR_
UNWRAPPING_ KEY_ HANDLE_ INVALID - CKR_
UNWRAPPING_ KEY_ SIZE_ RANGE - CKR_
UNWRAPPING_ KEY_ TYPE_ INCONSISTENT - CKR_
USER_ ALREADY_ LOGGED_ IN - CKR_
USER_ ANOTHER_ ALREADY_ LOGGED_ IN - CKR_
USER_ NOT_ LOGGED_ IN - CKR_
USER_ PIN_ NOT_ INITIALIZED - CKR_
USER_ TOO_ MANY_ TYPES - CKR_
USER_ TYPE_ INVALID - CKR_
VENDOR_ DEFINED - CKR_
WRAPPED_ KEY_ INVALID - CKR_
WRAPPED_ KEY_ LEN_ RANGE - CKR_
WRAPPING_ KEY_ HANDLE_ INVALID - CKR_
WRAPPING_ KEY_ SIZE_ RANGE - CKR_
WRAPPING_ KEY_ TYPE_ INCONSISTENT - CKS_
LAST_ VALIDATION_ OK - CKS_
RO_ PUBLIC_ SESSION - CKS_
RO_ USER_ FUNCTIONS - CKS_
RW_ PUBLIC_ SESSION - CKS_
RW_ SO_ FUNCTIONS - CKS_
RW_ USER_ FUNCTIONS - CKT_
NOT_ TRUSTED - CKT_
TRUSTED - CKT_
TRUST_ ANCHOR - CKT_
TRUST_ MUST_ VERIFY_ TRUST - CKT_
TRUST_ UNKNOWN - CKU_
CONTEXT_ SPECIFIC - CKU_SO
- CKU_
USER - CKV_
AUTHORITY_ TYPE_ COMMON_ CRITERIA - CKV_
AUTHORITY_ TYPE_ NIST_ CMVP - CKV_
AUTHORITY_ TYPE_ UNSPECIFIED - CKV_
TYPE_ FIRMWARE - CKV_
TYPE_ HARDWARE - CKV_
TYPE_ HYBRID - CKV_
TYPE_ SOFTWARE - CKV_
TYPE_ UNSPECIFIED - CKZ_
DATA_ SPECIFIED - CKZ_
SALT_ SPECIFIED - CK_
CERTIFICATE_ CATEGORY_ AUTHORITY - CK_
CERTIFICATE_ CATEGORY_ OTHER_ ENTITY - CK_
CERTIFICATE_ CATEGORY_ TOKEN_ USER - CK_
CERTIFICATE_ CATEGORY_ UNSPECIFIED - CK_
EFFECTIVELY_ INFINITE - CK_
FALSE - CK_
INVALID_ HANDLE - CK_
OTP_ CHALLENGE - CK_
OTP_ COUNTER - CK_
OTP_ FLAGS - CK_
OTP_ FORMAT_ ALPHANUMERIC - CK_
OTP_ FORMAT_ BINARY - CK_
OTP_ FORMAT_ DECIMAL - CK_
OTP_ FORMAT_ HEXADECIMAL - CK_
OTP_ OUTPUT_ FORMAT - CK_
OTP_ OUTPUT_ LENGTH - CK_
OTP_ PARAM_ IGNORED - CK_
OTP_ PARAM_ MANDATORY - CK_
OTP_ PARAM_ OPTIONAL - CK_
OTP_ PIN - CK_
OTP_ TIME - CK_
OTP_ VALUE - CK_
SECURITY_ DOMAIN_ MANUFACTURER - CK_
SECURITY_ DOMAIN_ OPERATOR - CK_
SECURITY_ DOMAIN_ THIRD_ PARTY - CK_
SECURITY_ DOMAIN_ UNSPECIFIED - CK_
SP800_ 108_ BYTE_ ARRAY - CK_
SP800_ 108_ COUNTER - CK_
SP800_ 108_ DKM_ LENGTH - CK_
SP800_ 108_ DKM_ LENGTH_ SUM_ OF_ KEYS - CK_
SP800_ 108_ DKM_ LENGTH_ SUM_ OF_ SEGMENTS - CK_
SP800_ 108_ ITERATION_ VARIABLE - CK_
SP800_ 108_ KEY_ HANDLE - CK_
SP800_ 108_ OPTIONAL_ COUNTER - CK_TRUE
- CK_
UNAVAILABLE_ INFORMATION - CRYPTOKI_
VERSION_ AMENDMENT - CRYPTOKI_
VERSION_ MAJOR - CRYPTOKI_
VERSION_ MINOR
Type Aliases§
- CK_
AES_ CBC_ ENCRYPT_ DATA_ PARAMS_ PTR - CK_
AES_ CCM_ PARAMS_ PTR - CK_
AES_ CTR_ PARAMS_ PTR - CK_
AES_ GCM_ PARAMS_ PTR - CK_
ARIA_ CBC_ ENCRYPT_ DATA_ PARAMS_ PTR - CK_
ASYNC_ DATA_ PTR - CK_
ATTRIBUTE_ PTR - CK_
ATTRIBUTE_ TYPE - CK_
BBOOL - CK_BYTE
- CK_
BYTE_ PTR - CK_
CAMELLIA_ CBC_ ENCRYPT_ DATA_ PARAMS_ PTR - CK_
CAMELLIA_ CTR_ PARAMS_ PTR - CK_
CCM_ MESSAGE_ PARAMS_ PTR - CK_
CCM_ PARAMS_ PTR - CK_
CCM_ WRAP_ PARAMS_ PTR - CK_
CERTIFICATE_ CATEGORY - CK_
CERTIFICATE_ TYPE - CK_
CHACH A20_ PARAMS_ PTR - CK_CHAR
- CK_
CHAR_ PTR - CK_
CMS_ SIG_ PARAMS_ PTR - CK_
CREATEMUTEX - CK_
C_ Async Complete - CK_
C_ Async GetID - CK_
C_ Async Join - CK_
C_ Cancel Function - CK_
C_ Close AllSessions - CK_
C_ Close Session - CK_
C_ Copy Object - CK_
C_ Create Object - CK_
C_ Decapsulate Key - CK_
C_ Decrypt - CK_
C_ Decrypt Digest Update - CK_
C_ Decrypt Final - CK_
C_ Decrypt Init - CK_
C_ Decrypt Message - CK_
C_ Decrypt Message Begin - CK_
C_ Decrypt Message Next - CK_
C_ Decrypt Update - CK_
C_ Decrypt Verify Update - CK_
C_ Derive Key - CK_
C_ Destroy Object - CK_
C_ Digest - CK_
C_ Digest Encrypt Update - CK_
C_ Digest Final - CK_
C_ Digest Init - CK_
C_ Digest Key - CK_
C_ Digest Update - CK_
C_ Encapsulate Key - CK_
C_ Encrypt - CK_
C_ Encrypt Final - CK_
C_ Encrypt Init - CK_
C_ Encrypt Message - CK_
C_ Encrypt Message Begin - CK_
C_ Encrypt Message Next - CK_
C_ Encrypt Update - CK_
C_ Finalize - CK_
C_ Find Objects - CK_
C_ Find Objects Final - CK_
C_ Find Objects Init - CK_
C_ Generate Key - CK_
C_ Generate KeyPair - CK_
C_ Generate Random - CK_
C_ GetAttribute Value - CK_
C_ GetFunction List - CK_
C_ GetFunction Status - CK_
C_ GetInfo - CK_
C_ GetInterface - CK_
C_ GetInterface List - CK_
C_ GetMechanism Info - CK_
C_ GetMechanism List - CK_
C_ GetObject Size - CK_
C_ GetOperation State - CK_
C_ GetSession Info - CK_
C_ GetSession Validation Flags - CK_
C_ GetSlot Info - CK_
C_ GetSlot List - CK_
C_ GetToken Info - CK_
C_ INITIALIZE_ ARGS_ PTR - CK_
C_ InitPIN - CK_
C_ Init Token - CK_
C_ Initialize - CK_
C_ Login - CK_
C_ Login User - CK_
C_ Logout - CK_
C_ Message Decrypt Final - CK_
C_ Message Decrypt Init - CK_
C_ Message Encrypt Final - CK_
C_ Message Encrypt Init - CK_
C_ Message Sign Final - CK_
C_ Message Sign Init - CK_
C_ Message Verify Final - CK_
C_ Message Verify Init - CK_
C_ Open Session - CK_
C_ Seed Random - CK_
C_ Session Cancel - CK_
C_ SetAttribute Value - CK_
C_ SetOperation State - CK_
C_ SetPIN - CK_
C_ Sign - CK_
C_ Sign Encrypt Update - CK_
C_ Sign Final - CK_
C_ Sign Init - CK_
C_ Sign Message - CK_
C_ Sign Message Begin - CK_
C_ Sign Message Next - CK_
C_ Sign Recover - CK_
C_ Sign Recover Init - CK_
C_ Sign Update - CK_
C_ Unwrap Key - CK_
C_ Unwrap KeyAuthenticated - CK_
C_ Verify - CK_
C_ Verify Final - CK_
C_ Verify Init - CK_
C_ Verify Message - CK_
C_ Verify Message Begin - CK_
C_ Verify Message Next - CK_
C_ Verify Recover - CK_
C_ Verify Recover Init - CK_
C_ Verify Signature - CK_
C_ Verify Signature Final - CK_
C_ Verify Signature Init - CK_
C_ Verify Signature Update - CK_
C_ Verify Update - CK_
C_ Wait ForSlot Event - CK_
C_ Wrap Key - CK_
C_ Wrap KeyAuthenticated - CK_
DERIVED_ KEY_ PTR - CK_
DESTROYMUTEX - CK_
DES_ CBC_ ENCRYPT_ DATA_ PARAMS_ PTR - CK_
DSA_ PARAMETER_ GEN_ PARAM_ PTR - CK_
ECDH1_ DERIVE_ PARAMS_ PTR - CK_
ECDH2_ DERIVE_ PARAMS_ PTR - CK_
ECDH_ AES_ KEY_ WRAP_ PARAMS_ PTR - CK_
ECMQV_ DERIVE_ PARAMS_ PTR - CK_
EC_ KDF_ TYPE - CK_
EC_ KDF_ TYPE_ PTR - CK_
EDDSA_ PARAMS_ PTR - CK_
EXTRACT_ PARAMS - CK_
EXTRACT_ PARAMS_ PTR - CK_
FLAGS - CK_
FLAGS_ PTR - CK_
FUNCTION_ LIST_ 3_ 0_ PTR - CK_
FUNCTION_ LIST_ 3_ 0_ PTR_ PTR - CK_
FUNCTION_ LIST_ 3_ 2_ PTR - CK_
FUNCTION_ LIST_ 3_ 2_ PTR_ PTR - CK_
FUNCTION_ LIST_ PTR - CK_
FUNCTION_ LIST_ PTR_ PTR - CK_
GCM_ MESSAGE_ PARAMS_ PTR - CK_
GCM_ PARAMS_ PTR - CK_
GCM_ WRAP_ PARAMS_ PTR - CK_
GENERATOR_ FUNCTION - CK_
GOST R3410_ DERIVE_ PARAMS_ PTR - CK_
GOST R3410_ KEY_ WRAP_ PARAMS_ PTR - CK_
HEDGE_ TYPE - CK_
HKDF_ PARAMS_ PTR - CK_
HSS_ LEVELS - CK_
HW_ FEATURE_ TYPE - CK_
IKE1_ EXTENDED_ DERIVE_ PARAMS_ PTR - CK_
IKE1_ PRF_ DERIVE_ PARAMS_ PTR - CK_
IKE2_ PRF_ PLUS_ DERIVE_ PARAMS_ PTR - CK_
IKE_ PRF_ DERIVE_ PARAMS_ PTR - CK_
INFO_ PTR - CK_
INTERFACE_ PTR - CK_
INTERFACE_ PTR_ PTR - CK_
JAVA_ MIDP_ SECURITY_ DOMAIN - CK_
KEA_ DERIVE_ PARAMS_ PTR - CK_
KEY_ DERIVATION_ STRING_ DATA_ PTR - CK_
KEY_ TYPE - CK_
KEY_ WRAP_ SET_ OAEP_ PARAMS_ PTR - CK_
KIP_ PARAMS_ PTR - CK_
LMOTS_ TYPE - CK_
LMS_ TYPE - CK_
LOCKMUTEX - CK_LONG
- CK_
MAC_ GENERAL_ PARAMS - CK_
MAC_ GENERAL_ PARAMS_ PTR - CK_
MECHANISM_ INFO_ PTR - CK_
MECHANISM_ PTR - CK_
MECHANISM_ TYPE - CK_
MECHANISM_ TYPE_ PTR - CK_
ML_ DSA_ PARAMETER_ SET_ TYPE - CK_
ML_ KEM_ PARAMETER_ SET_ TYPE - CK_
NOTIFICATION - CK_
NOTIFY - CK_
OBJECT_ CLASS - CK_
OBJECT_ CLASS_ PTR - CK_
OBJECT_ HANDLE - CK_
OBJECT_ HANDLE_ PTR - CK_
OTP_ PARAMS_ PTR - CK_
OTP_ PARAM_ PTR - CK_
OTP_ PARAM_ TYPE - CK_
OTP_ SIGNATURE_ INFO_ PTR - CK_
PARAM_ TYPE - CK_
PBE_ PARAMS_ PTR - CK_
PKCS5_ PBKD2_ PARAM S2_ PTR - CK_
PKCS5_ PBKD2_ PARAMS_ PTR - CK_
PKCS5_ PBKD2_ PSEUDO_ RANDOM_ FUNCTION_ TYPE - CK_
PKCS5_ PBKD2_ PSEUDO_ RANDOM_ FUNCTION_ TYPE_ PTR - CK_
PKCS5_ PBKD F2_ SALT_ SOURCE_ TYPE - CK_
PKCS5_ PBKD F2_ SALT_ SOURCE_ TYPE_ PTR - CK_
PRF_ DATA_ PARAM_ PTR - CK_
PRF_ DATA_ TYPE - CK_
PROFILE_ ID - CK_
PROFILE_ ID_ PTR - CK_
RC2_ CBC_ PARAMS_ PTR - CK_
RC2_ MAC_ GENERAL_ PARAMS_ PTR - CK_
RC2_ PARAMS - CK_
RC2_ PARAMS_ PTR - CK_
RC5_ CBC_ PARAMS_ PTR - CK_
RC5_ MAC_ GENERAL_ PARAMS_ PTR - CK_
RC5_ PARAMS_ PTR - CK_
RSA_ AES_ KEY_ WRAP_ PARAMS_ PTR - CK_
RSA_ PKCS_ MGF_ TYPE - CK_
RSA_ PKCS_ MGF_ TYPE_ PTR - CK_
RSA_ PKCS_ OAEP_ PARAMS_ PTR - CK_
RSA_ PKCS_ OAEP_ SOURCE_ TYPE - CK_
RSA_ PKCS_ OAEP_ SOURCE_ TYPE_ PTR - CK_
RSA_ PKCS_ PSS_ PARAMS_ PTR - CK_RV
- CK_
SALS A20_ CHACH A20_ POLY1305_ MSG_ PARAMS_ PTR - CK_
SALS A20_ CHACH A20_ POLY1305_ PARAMS_ PTR - CK_
SALS A20_ PARAMS_ PTR - CK_
SEED_ CBC_ ENCRYPT_ DATA_ PARAMS_ PTR - CK_
SESSION_ HANDLE - CK_
SESSION_ HANDLE_ PTR - CK_
SESSION_ INFO_ PTR - CK_
SESSION_ VALIDATION_ FLAGS_ TYPE - CK_
SKIPJACK_ PRIVATE_ WRAP_ PARAMS_ PTR - CK_
SKIPJACK_ RELAYX_ PARAMS_ PTR - CK_
SLH_ DSA_ PARAMETER_ SET_ TYPE - CK_
SLOT_ ID - CK_
SLOT_ ID_ PTR - CK_
SLOT_ INFO_ PTR - CK_
SP800_ 108_ COUNTER_ FORMAT_ PTR - CK_
SP800_ 108_ DKM_ LENGTH_ FORMAT_ PTR - CK_
SP800_ 108_ DKM_ LENGTH_ METHOD - CK_
SP800_ 108_ FEEDBACK_ KDF_ PARAMS_ PTR - CK_
SP800_ 108_ KDF_ PARAMS_ PTR - CK_
SP800_ 108_ PRF_ TYPE - CK_
SSL3_ KEY_ MAT_ OUT_ PTR - CK_
SSL3_ KEY_ MAT_ PARAMS_ PTR - CK_
SSL3_ MASTER_ KEY_ DERIVE_ PARAMS_ PTR - CK_
STATE - CK_
TLS12_ EXTENDED_ MASTER_ KEY_ DERIVE_ PARAMS_ PTR - CK_
TLS12_ KEY_ MAT_ PARAMS_ PTR - CK_
TLS12_ MASTER_ KEY_ DERIVE_ PARAMS_ PTR - CK_
TLS_ KDF_ PARAMS_ PTR - CK_
TLS_ MAC_ PARAMS_ PTR - CK_
TLS_ PRF_ PARAMS_ PTR - CK_
TOKEN_ INFO_ PTR - CK_
TRUST - CK_
ULONG - CK_
ULONG_ PTR - CK_
UNLOCKMUTEX - CK_
USER_ TYPE - CK_
UTF8CHAR - CK_
UTF8CHAR_ PTR - CK_
VALIDATION_ AUTHORITY_ TYPE - CK_
VALIDATION_ AUTHORITY_ TYPE_ PTR - CK_
VALIDATION_ TYPE - CK_
VALIDATION_ TYPE_ PTR - CK_
VERSION_ PTR - CK_
VOID_ PTR - CK_
VOID_ PTR_ PTR - CK_
WTLS_ KEY_ MAT_ OUT_ PTR - CK_
WTLS_ KEY_ MAT_ PARAMS_ PTR - CK_
WTLS_ MASTER_ KEY_ DERIVE_ PARAMS_ PTR - CK_
WTLS_ PRF_ PARAMS_ PTR - CK_
WTLS_ RANDOM_ DATA_ PTR - CK_
X2RATCHET_ INITIALIZE_ PARAMS_ PTR - CK_
X2RATCHET_ KDF_ TYPE - CK_
X2RATCHET_ KDF_ TYPE_ PTR - CK_
X2RATCHET_ RESPOND_ PARAMS_ PTR - CK_
X3DH_ KDF_ TYPE - CK_
X3DH_ KDF_ TYPE_ PTR - CK_
X9_ 42_ DH1_ DERIVE_ PARAMS_ PTR - CK_
X9_ 42_ DH2_ DERIVE_ PARAMS_ PTR - CK_
X9_ 42_ DH_ KDF_ TYPE - CK_
X9_ 42_ DH_ KDF_ TYPE_ PTR - CK_
X9_ 42_ MQV_ DERIVE_ PARAMS_ PTR - CK_
XEDDSA_ HASH_ TYPE - CK_
XEDDSA_ HASH_ TYPE_ PTR - CK_
XEDDSA_ PARAMS_ PTR - CK_
XMSSMT_ PARAMETER_ SET_ TYPE - CK_
XMSS_ PARAMETER_ SET_ TYPE