Les traductions sont fournies par des outils de traduction automatique. En cas de conflit entre le contenu d'une traduction et celui de la version originale en anglais, la version anglaise prévaudra.
# Tableau des attributs de bibliothèque PKCS \#11 pour le SDK AWS CloudHSM client 3
La table de bibliothèque PKCS \#11 pour AWS CloudHSM le SDK client 3 contient une liste d'attributs qui diffèrent selon le type de clé. Il indique si un attribut donné est pris en charge pour un type de clé particulier lors de l'utilisation d'une fonction cryptographique spécifique avec AWS CloudHSM.
**Légende :**
+ ✔ indique que CloudHSM prend en charge l'attribut pour le type de clé spécifique.
+ ✖ indique que CloudHSM ne prend pas en charge l'attribut pour le type de clé spécifique.
+ R indique que la valeur de l'attribut est définie en lecture seule pour le type de clé spécifique.
+ S indique que l'attribut ne peut pas être lu par `GetAttributeValue` car sensible.
+ Une cellule vide dans la colonne Default Value (Valeur par défaut) indique qu'il n'y a aucune valeur par défaut attribuée à l'attribut.
## GenerateKeyPair
| Attribut | Type de clé | **Valeur par défaut** | |
|---|
| | **EC privée** | **EC publique** | **RSA privée** | **RSA publique** | | |
| `CKA_CLASS` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_KEY_TYPE` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | R | True | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_DECRYPT` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✔[3](#pkcs11-v3-f10) | ✖ | | |
| `CKA_VERIFY` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✔[4](#pkcs11-v3-f11) | | |
| `CKA_WRAP` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_WRAP_TEMPLATE` | ✖ | ✔ | ✖ | ✔ | | |
| `CKA_TRUSTED` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_UNWRAP` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✖ | ✔ | ✖ | | |
| `CKA_SENSITIVE` | ✔ | ✖ | ✔ | ✖ | True | |
| `CKA_ALWAYS_SENSITIVE` | R | ✖ | R | ✖ | | |
| `CKA_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | ✖ | R | ✖ | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_EC_PARAMS` | ✖ | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_CHECK_VALUE` | R | R | R | R | | |
## GenerateKey
| Attribut | Type de clé | **Valeur par défaut** | |
|---|
| | **AES** | **DES3** | **Secrète générique** | | |
| `CKA_CLASS` | ✔ | ✔ | ✔ | | |
| `CKA_KEY_TYPE` | ✔ | ✔ | ✔ | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | True | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_VERIFY` | ✔ | ✔ | ✔ | True | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_TEMPLATE` | ✔ | ✔ | ✖ | | |
| `CKA_TRUSTED` | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✔ | ✔ | False | |
| `CKA_UNWRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✔ | ✖ | | |
| `CKA_SENSITIVE` | ✔ | ✔ | ✔ | True | |
| `CKA_ALWAYS_SENSITIVE` | ✖ | ✖ | ✖ | | |
| `CKA_EXTRACTABLE` | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✔[2](#pkcs11-v3-f9) | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_CHECK_VALUE` | R | R | R | | |
## CreateObject
| Attribut | Type de clé | **Valeur par défaut** | |
|---|
| | **EC privée** | **EC publique** | **RSA privée** | **RSA publique** | **AES** | **DES3** | **Secrète générique** | | |
| `CKA_CLASS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_KEY_TYPE` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | R | R | R | R | False | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✔[3](#pkcs11-v3-f10) | ✖ | ✖ | ✖ | ✖ | False | |
| `CKA_VERIFY` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✔[4](#pkcs11-v3-f11) | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_TEMPLATE` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✖ | | |
| `CKA_TRUSTED` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | False | |
| `CKA_UNWRAP` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | | |
| `CKA_SENSITIVE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | True | |
| `CKA_ALWAYS_SENSITIVE` | R | ✖ | R | ✖ | R | R | R | | |
| `CKA_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | ✖ | R | ✖ | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_CHECK_VALUE` | R | R | R | R | R | R | R | | |
## UnwrapKey
| Attribut | Type de clé | **Valeur par défaut** | |
|---|
| | **EC privée** | **RSA privée** | **AES** | **DES3** | **Secrète générique** | | |
| `CKA_CLASS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_KEY_TYPE` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | R | R | False | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✖ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✔[3](#pkcs11-v3-f10) | ✖ | ✖ | ✖ | False | |
| `CKA_VERIFY` | ✖ | ✖ | ✔ | ✔ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✖ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP` | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_SENSITIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_EXTRACTABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | R | R | R | R | | |
| `CKA_ALWAYS_SENSITIVE` | R | R | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_CHECK_VALUE` | R | R | R | R | R | | |
## DeriveKey
| Attribut | Type de clé | **Valeur par défaut** | |
|---|
| | **AES** | **DES3** | **Secrète générique** | | |
| `CKA_CLASS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_KEY_TYPE` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | True | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_SIGN` | ✔ | ✔ | ✔ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_VERIFY` | ✔ | ✔ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_SENSITIVE` | ✔ | ✔ | ✔ | True | |
| `CKA_EXTRACTABLE` | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | R | R | | |
| `CKA_ALWAYS_SENSITIVE` | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✔[2](#pkcs11-v3-f9) | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_CHECK_VALUE` | R | R | R | | |
## GetAttributeValue
| Attribut | Type de clé | |
|---|
| | **EC privée** | **EC publique** | **RSA privée** | **RSA publique** | **AES** | **DES3** | **Secrète générique** | |
| `CKA_CLASS` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_KEY_TYPE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_LOCAL` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | |
| `CKA_ENCRYPT` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | |
| `CKA_DECRYPT` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_MODIFIABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_SIGN` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | |
| `CKA_VERIFY` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_WRAP` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | |
| `CKA_WRAP_TEMPLATE` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✖ | |
| `CKA_TRUSTED` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_UNWRAP` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | |
| `CKA_SENSITIVE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_NEVER_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_ALWAYS_SENSITIVE` | R | R | R | R | R | R | R | |
| `CKA_MODULUS` | ✖ | ✖ | ✔ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_PRIME_1` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_PRIME_2` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_COEFFICIENT` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_EXPONENT_1` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_EXPONENT_2` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✔ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_EC_PARAMS` | ✔ | ✔ | ✖ | ✖ | ✖ | ✖ | ✖ | |
| `CKA_EC_POINT` | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | ✖ | |
| `CKA_VALUE` | S | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | ✔ | ✖ | ✔ | |
| `CKA_CHECK_VALUE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✖ | |
**Annotations d'attributs**
+ [1] Cet attribut est partiellement pris en charge par le micrologiciel et doit être explicitement défini sur la valeur par défaut.
+ [2] Attribut obligatoire.
+ [3] **SDK client 3 uniquement**. L’attribut `CKA_SIGN_RECOVER` est dérivé de l’attribut `CKA_SIGN`. S’il est défini, il doit uniquement l’être avec la même valeur que celle définie pour `CKA_SIGN`. Dans le cas contraire, il prend la valeur par défaut de `CKA_SIGN`. Étant donné que CloudHSM prend uniquement en charge les mécanismes de signature récupérable basés sur RSA, cet attribut est actuellement applicable uniquement aux clés publiques RSA.
+ [4] **SDK client 3 uniquement**. L’attribut `CKA_VERIFY_RECOVER` est dérivé de l’attribut `CKA_VERIFY`. S’il est défini, il doit uniquement l’être avec la même valeur que celle définie pour `CKA_VERIFY`. Dans le cas contraire, il prend la valeur par défaut de `CKA_VERIFY`. Étant donné que CloudHSM prend uniquement en charge les mécanismes de signature récupérable basés sur RSA, cet attribut est actuellement applicable uniquement aux clés publiques RSA.