本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
# AWS CloudHSM 用戶端 SDK 3 的 PKCS \#11 程式庫屬性資料表
AWS CloudHSM 用戶端 SDK 3 的 PKCS \#11 程式庫資料表包含因金鑰類型而異的屬性清單。它指出在使用特定密碼編譯函數時，特定金鑰類型是否支援指定的屬性 AWS CloudHSM。
**圖例：**
+ ✔ 表示 CloudHSM 支援特定金鑰類型的屬性。
+ ✖ 表示 CloudHSM 不支援特定金鑰類型的屬性。
+ R 表示特定金鑰類型的屬性值設定為唯讀模式。
+ S 表示屬性較為敏感，因此無法透過 `GetAttributeValue` 讀取。
+ 預設值欄位中的空白儲存格表示屬性沒有獲派指定預設值。
## GenerateKeyPair
| 屬性 | 金鑰類型 | **預設值** | |
|---|
| | **EC 私有金鑰** | **EC 公有金鑰** | **RSA 私有金鑰** | **RSA 公有金鑰** | | |
| `CKA_CLASS` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_KEY_TYPE` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | R | True | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_DECRYPT` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✔[3](#pkcs11-v3-f10) | ✖ | | |
| `CKA_VERIFY` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✔[4](#pkcs11-v3-f11) | | |
| `CKA_WRAP` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_WRAP_TEMPLATE` | ✖ | ✔ | ✖ | ✔ | | |
| `CKA_TRUSTED` | ✖ | ✔ | ✖ | ✔ | False | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_UNWRAP` | ✔ | ✖ | ✔ | ✖ | False | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✖ | ✔ | ✖ | | |
| `CKA_SENSITIVE` | ✔ | ✖ | ✔ | ✖ | True | |
| `CKA_ALWAYS_SENSITIVE` | R | ✖ | R | ✖ | | |
| `CKA_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | ✖ | R | ✖ | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_EC_PARAMS` | ✖ | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_CHECK_VALUE` | R | R | R | R | | |
## GenerateKey
| 屬性 | 金鑰類型 | **預設值** | |
|---|
| | **AES** | **DES3** | **一般機密** | | |
| `CKA_CLASS` | ✔ | ✔ | ✔ | | |
| `CKA_KEY_TYPE` | ✔ | ✔ | ✔ | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | True | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_VERIFY` | ✔ | ✔ | ✔ | True | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_TEMPLATE` | ✔ | ✔ | ✖ | | |
| `CKA_TRUSTED` | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✔ | ✔ | False | |
| `CKA_UNWRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✔ | ✖ | | |
| `CKA_SENSITIVE` | ✔ | ✔ | ✔ | True | |
| `CKA_ALWAYS_SENSITIVE` | ✖ | ✖ | ✖ | | |
| `CKA_EXTRACTABLE` | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✔[2](#pkcs11-v3-f9) | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_CHECK_VALUE` | R | R | R | | |
## CreateObject
| 屬性 | 金鑰類型 | **預設值** | |
|---|
| | **EC 私有金鑰** | **EC 公有金鑰** | **RSA 私有金鑰** | **RSA 公有金鑰** | **AES** | **DES3** | **一般機密** | | |
| `CKA_CLASS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_KEY_TYPE` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | R | R | R | R | False | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✔[3](#pkcs11-v3-f10) | ✖ | ✖ | ✖ | ✖ | False | |
| `CKA_VERIFY` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✔[4](#pkcs11-v3-f11) | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_TEMPLATE` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✖ | | |
| `CKA_TRUSTED` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | False | |
| `CKA_UNWRAP` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | | |
| `CKA_SENSITIVE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | True | |
| `CKA_ALWAYS_SENSITIVE` | R | ✖ | R | ✖ | R | R | R | | |
| `CKA_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | ✖ | R | ✖ | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✔[2](#pkcs11-v3-f9) | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_CHECK_VALUE` | R | R | R | R | R | R | R | | |
## UnwrapKey
| 屬性 | 金鑰類型 | **預設值** | |
|---|
| | **EC 私有金鑰** | **RSA 私有金鑰** | **AES** | **DES3** | **一般機密** | | |
| `CKA_CLASS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_KEY_TYPE` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | R | R | False | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✖ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_SIGN` | ✔ | ✔ | ✔ | ✔ | ✔ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✔[3](#pkcs11-v3-f10) | ✖ | ✖ | ✖ | False | |
| `CKA_VERIFY` | ✖ | ✖ | ✔ | ✔ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✖ | ✖ | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP` | ✖ | ✔ | ✔ | ✔ | ✖ | False | |
| `CKA_SENSITIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_EXTRACTABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | R | R | R | R | | |
| `CKA_ALWAYS_SENSITIVE` | R | R | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | ✖ | | |
| `CKA_CHECK_VALUE` | R | R | R | R | R | | |
## DeriveKey
| 屬性 | 金鑰類型 | **預設值** | |
|---|
| | **AES** | **DES3** | **一般機密** | | |
| `CKA_CLASS` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_KEY_TYPE` | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | | |
| `CKA_ID` | ✔ | ✔ | ✔ | | |
| `CKA_LOCAL` | R | R | R | True | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | False | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_ENCRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DECRYPT` | ✔ | ✔ | ✖ | False | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | False | |
| `CKA_MODIFIABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_DESTROYABLE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | True | |
| `CKA_SIGN` | ✔ | ✔ | ✔ | False | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_VERIFY` | ✔ | ✔ | ✔ | False | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | | |
| `CKA_WRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_UNWRAP` | ✔ | ✔ | ✖ | False | |
| `CKA_SENSITIVE` | ✔ | ✔ | ✔ | True | |
| `CKA_EXTRACTABLE` | ✔ | ✔ | ✔ | True | |
| `CKA_NEVER_EXTRACTABLE` | R | R | R | | |
| `CKA_ALWAYS_SENSITIVE` | R | R | R | | |
| `CKA_MODULUS` | ✖ | ✖ | ✖ | | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_1` | ✖ | ✖ | ✖ | | |
| `CKA_PRIME_2` | ✖ | ✖ | ✖ | | |
| `CKA_COEFFICIENT` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_1` | ✖ | ✖ | ✖ | | |
| `CKA_EXPONENT_2` | ✖ | ✖ | ✖ | | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✖ | | |
| `CKA_EC_PARAMS` | ✖ | ✖ | ✖ | | |
| `CKA_EC_POINT` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE` | ✖ | ✖ | ✖ | | |
| `CKA_VALUE_LEN` | ✔[2](#pkcs11-v3-f9) | ✖ | ✔[2](#pkcs11-v3-f9) | | |
| `CKA_CHECK_VALUE` | R | R | R | | |
## GetAttributeValue
| 屬性 | 金鑰類型 | |
|---|
| | **EC 私有金鑰** | **EC 公有金鑰** | **RSA 私有金鑰** | **RSA 公有金鑰** | **AES** | **DES3** | **一般機密** | |
| `CKA_CLASS` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_KEY_TYPE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_LABEL` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_ID` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_LOCAL` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_TOKEN` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_PRIVATE` | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | ✔[1](#pkcs11-v3-f8) | |
| `CKA_ENCRYPT` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | |
| `CKA_DECRYPT` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | |
| `CKA_DERIVE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_MODIFIABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_DESTROYABLE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_SIGN` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_SIGN_RECOVER` | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | |
| `CKA_VERIFY` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_VERIFY_RECOVER` | ✖ | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_WRAP` | ✖ | ✖ | ✖ | ✔ | ✔ | ✔ | ✖ | |
| `CKA_WRAP_TEMPLATE` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✖ | |
| `CKA_TRUSTED` | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | ✔ | |
| `CKA_WRAP_WITH_TRUSTED` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_UNWRAP` | ✖ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | |
| `CKA_UNWRAP_TEMPLATE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✖ | |
| `CKA_SENSITIVE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_NEVER_EXTRACTABLE` | ✔ | ✖ | ✔ | ✖ | ✔ | ✔ | ✔ | |
| `CKA_ALWAYS_SENSITIVE` | R | R | R | R | R | R | R | |
| `CKA_MODULUS` | ✖ | ✖ | ✔ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_MODULUS_BITS` | ✖ | ✖ | ✖ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_PRIME_1` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_PRIME_2` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_COEFFICIENT` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_EXPONENT_1` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_EXPONENT_2` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_PRIVATE_EXPONENT` | ✖ | ✖ | S | ✖ | ✖ | ✖ | ✖ | |
| `CKA_PUBLIC_EXPONENT` | ✖ | ✖ | ✔ | ✔ | ✖ | ✖ | ✖ | |
| `CKA_EC_PARAMS` | ✔ | ✔ | ✖ | ✖ | ✖ | ✖ | ✖ | |
| `CKA_EC_POINT` | ✖ | ✔ | ✖ | ✖ | ✖ | ✖ | ✖ | |
| `CKA_VALUE` | S | ✖ | ✖ | ✖ | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | ✔[2](#pkcs11-v3-f9) | |
| `CKA_VALUE_LEN` | ✖ | ✖ | ✖ | ✖ | ✔ | ✖ | ✔ | |
| `CKA_CHECK_VALUE` | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✖ | |
**屬性註釋**
+ [1] 此屬性受韌體部分支援，且需明確設定為僅限預設值。
+ [2] 必要屬性。
+ [3] **僅限於用戶端 SDK 3**。`CKA_SIGN_RECOVER` 屬性由 `CKA_SIGN` 屬性衍生而來。若已設定，該屬性就僅能設定為與 `CKA_SIGN` 相同的值。若未設定，則該屬性會衍生 `CKA_SIGN` 的預設值。CloudHSM 只支援以 RSA 為基礎的可復原簽章機制，因此屬性目前僅適用於 RSA 公有金鑰。
+ [4] **僅限於用戶端 SDK 3**。`CKA_VERIFY_RECOVER` 屬性由 `CKA_VERIFY` 屬性衍生而來。若已設定，該屬性就僅能設定為與 `CKA_VERIFY` 相同的值。若未設定，則該屬性會衍生 `CKA_VERIFY` 的預設值。CloudHSM 只支援以 RSA 為基礎的可復原簽章機制，因此此屬性目前僅適用於 RSA 公有金鑰。