Cryptographic Token Interface Standard

PKCS#11


Hardware Feature Objects


Sections

Clock Objects
Monotonic Counter Objects

Detailed Description

Hardware feature objects (CKO_HW_FEATURE) represent features of the device. They provide an easily expandable method for introducing new value-based features to the cryptoki interface. The following figure illustrates the hierarchy of hardware feature objects and some of the attributes they support:

v211_figure_6.gif
Figure 6, Hardware Feature Object Attribute Hierarchy

When searching for objects using C_FindObjectsInit and C_FindObjects, hardware feature objects are not returned unless the CKA_CLASS attribute in the template has the value CKO_HW_FEATURE. This protects applications written to previous versions of cryptoki from finding objects that they do not understand.

Table 16, Hardware Feature Common Attributes
Attribute Data Type Meaning
CKA_HW_FEATURE_TYPE CK_HW_FEATURE Hardware feature (type)

Cryptoki Version 2.11 supports the following values for CKA_HW_FEATURE_TYPE : CKH_MONOTONIC_COUNTER, and CKH_CLOCK.


RSA Security Inc. Public-Key Cryptography Standards - PKCS#11 - v211