canmove, Confirmed users
937
edits
FIPS Operational Environment: Difference between revisions
Jump to navigation
Jump to search
FIPS Operational Environment (view source)
Revision as of 18:31, 26 September 2006
, 26 September 2006→Auditable Events
| Line 177: | Line 177: | ||
** Object management functions, where the object is a cryptographic key (object class <code>CKO_PUBLIC_KEY</code>, <code>CKO_PRIVATE_KEY</code>, and <code>CKO_SECRET_KEY</code>) | ** Object management functions, where the object is a cryptographic key (object class <code>CKO_PUBLIC_KEY</code>, <code>CKO_PRIVATE_KEY</code>, and <code>CKO_SECRET_KEY</code>) | ||
*** <code>FC_CreateObject</code> | *** <code>FC_CreateObject</code> | ||
**** "C_CreateObject(hSession=''<session handle>'', pTemplate=''<template pointer>'', ulCount=''<count>'', phObject=''<object handle pointer>'')=''<return code>''" | |||
*** <code>FC_CopyObject</code> | *** <code>FC_CopyObject</code> | ||
**** "C_CopyObject(hSession=''<session handle>'', hObject=''<object handle>'', pTemplate=''<template pointer>'', ulCount=''<count>'', phNewObject=''<object handle pointer>'')=''<return code>''" | |||
*** <code>FC_DestroyObject</code> | *** <code>FC_DestroyObject</code> | ||
**** "C_DestroyObject(hSession=''<session handle>'', hObject=''<object handle>'')=''<return code>''" | |||
*** <code>FC_GetObjectSize</code> | *** <code>FC_GetObjectSize</code> | ||
**** "C_GetObjectSize(hSession=''<session handle>'', hObject=''<object handle>'', pulSize=''<size pointer>'')=''<return code>''" | |||
*** <code>FC_GetAttributeValue</code> | *** <code>FC_GetAttributeValue</code> | ||
**** "C_GetAttributeValue(hSession=''<session handle>'', hObject=''<object handle>'', pTemplate=''<template pointer>'', ulCount=''<count>'')=''<return code>''" | |||
*** <code>FC_SetAttributeValue</code> | *** <code>FC_SetAttributeValue</code> | ||
**** "C_SetAttributeValue(hSession=''<session handle>'', hObject=''<object handle>'', pTemplate=''<template pointer>'', ulCount=''<count>'')=''<return code>''" | |||
** Key management functions | ** Key management functions | ||
*** <code>FC_GenerateKey</code> | *** <code>FC_GenerateKey</code> | ||
**** "C_GenerateKey(hSession=''<session handle>'', pMechanism=''<mechanism>'', pTemplate=''<template pointer>'', ulCount=''<count>'', phKey=''<key object handle pointer>'')=''<return code>''" | |||
*** <code>FC_GenerateKeyPair</code> | *** <code>FC_GenerateKeyPair</code> | ||
*** <code>FC_UnwrapKey</code> | *** <code>FC_UnwrapKey</code> | ||
*** <code>FC_DeriveKey</code> | *** <code>FC_DeriveKey</code> | ||
** Cipher "Init" functions | ** Cipher "Init" functions | ||
*** <code>C_EncryptInit</code> | *** <code>FC_EncryptInit</code> | ||
*** <code> | **** "C_EncryptInit(hSession=''<session handle>'', pMechanism=''<mechanism>'', hKey=''<key object handle>'')=''<return code>''" | ||
*** <code>C_SignInit< | *** <code>FC_DecryptInit</code> | ||
*** <code>C_SignRecoverInit< | **** "C_DecryptInit(hSession=''<session handle>'', pMechanism=''<mechanism>'', hKey=''<key object handle>'')=''<return code>''" | ||
*** <code>C_VerifyInit< | *** <code>FC_DigestKey</code> | ||
*** <code>C_VerifyRecoverInit< | *** <code>FC_SignInit</code> | ||
**** "C_SignInit(hSession=''<session handle>'', pMechanism=''<mechanism>'', hKey=''<key object handle>'')=''<return code>''" | |||
*** <code>FC_SignRecoverInit</code> | |||
**** "C_SignRecoverInit(hSession=''<session handle>'', pMechanism=''<mechanism>'', hKey=''<key object handle>'')=''<return code>''" | |||
*** <code>FC_VerifyInit</code> | |||
**** "C_VerifyInit(hSession=''<session handle>'', pMechanism=''<mechanism>'', hKey=''<key object handle>'')=''<return code>''" | |||
*** <code>FC_VerifyRecoverInit</code> | |||
**** "C_VerifyRecoverInit(hSession=''<session handle>'', pMechanism=''<mechanism>'', hKey=''<key object handle>'')=''<return code>''" | |||
* attempts to provide invalid input for crypto officer functions: We log the use of all crypto officer functions with the return code. The return code tells us whether the operator attempted to provide invalid input. | * attempts to provide invalid input for crypto officer functions: We log the use of all crypto officer functions with the return code. The return code tells us whether the operator attempted to provide invalid input. | ||
** <code>FC_InitToken(slotID, pPin, ulPinLen, pLabel)</code> | ** <code>FC_InitToken(slotID, pPin, ulPinLen, pLabel)</code> | ||