- C_WrapKey/C_UnwrapKey: CKM_AES_KEY_WRAP (RFC 3394) + CKM_RSA_PKCS_OAEP, secret keys only - new AES-KEY-WRAP primitive in cipher.zig (RFC 3394 KAT-verified, fail-closed, zeroized temps) - C_DeriveKey: factor shared secret-key-object builder; accept raw SEC1 or DER peer point - C_DigestKey: secret-key class + sealed-guard (CKR_KEY_INDIGESTIBLE / CKR_USER_NOT_LOGGED_IN) - advertise CKM_ECDH1_DERIVE + CKM_AES_KEY_WRAP; add WRAP/UNWRAP to RSA-PKCS-OAEP - 9 OASIS-exact CKR_* wrap/unwrap/digest error codes - 70/70 tests; proven via in-process smoke + cross-process pkcs11-tool (OpenSSL + RFC 3394 oracles) |
||
|---|---|---|
| .. | ||
| advanced | ||
| beginner | ||
| foundations | ||
| intermediate | ||