Red Hat Bugzilla – Bug 1191231
Missing CKM_AES_KEY_WRAP, CKM_AES_KEY_WRAP_PAD and CKA_COPYABLE constants
Last modified: 2017-08-01 12:52:09 EDT
Description of problem: Missing CKM_AES_KEY_WRAP, CKM_AES_KEY_WRAP_PAD and CKA_COPYABLE constants in pkcs11.h file Actual results: Missing constants Expected results: Constants CKM_AES_KEY_WRAP_PAD, CKM_AES_KEY_WRAP and CKA_COPYABLE in pkcs11.h file. Additional info: #define CKM_AES_KEY_WRAP (0x1090) #define CKM_AES_KEY_WRAP_PAD (0x1091) #define CKA_COPYABLE (0x171)
The latest PKCS #11 v2.40 specification, changes the values, because there was conflict with Blowfish in older version v2.30: http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cs01/pkcs11-curr-v2.40-cs01.pdf #define CKM_BLOWFISH_KEY_GEN 0x00001090 #define CKM_BLOWFISH_CBC 0x00001091 #define CKM_AES_KEY_WRAP 0x00002109 #define CKM_AES_KEY_WRAP_PAD 0x0000210A
SoftHSMv2 moved to these new values too so please use v2.40 compliant values. Thanks!
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1981