Re: Comments on wrap/unwrap

On Mon, Jun 17, 2013 at 5:34 PM, Hutchinson Michael
<Michael.Hutchinson@gemalto.com> wrote:
> Is there not a third option?
>
>
>
> Specify the problem away?
>
>
>
> Any attempt to create/return a key with KeyUsage of “unwrap” and with
> extractable set to true returns an error

Restricts other use-cases, such as key escrow.

>
> Any attempt to create/return a key with KeyUsage of “unwrap” and “decrypt”
> returns an error

Relies on the caller supplying a valid set of attributes, whereas
Mark's requirement is that the caller is not trusted.

>
>
>
>>Michael

Received on Tuesday, 18 June 2013 01:41:11 UTC