KeyModesOfUse - AWS Payment Cryptography Control Plane

KeyModesOfUse

The list of cryptographic operations that you can perform using the key. The modes of use are defined in section A.5.3 of the TR-31 spec.

Contents

Decrypt

Specifies whether an AWS Payment Cryptography key can be used to decrypt data.

Type: Boolean

Required: No

DeriveKey

Specifies whether an AWS Payment Cryptography key can be used to derive new keys.

Type: Boolean

Required: No

Encrypt

Specifies whether an AWS Payment Cryptography key can be used to encrypt data.

Type: Boolean

Required: No

Generate

Specifies whether an AWS Payment Cryptography key can be used to generate and verify other card and PIN verification keys.

Type: Boolean

Required: No

NoRestrictions

Specifies whether an AWS Payment Cryptography key has no special restrictions other than the restrictions implied by KeyUsage.

Type: Boolean

Required: No

Sign

Specifies whether an AWS Payment Cryptography key can be used for signing.

Type: Boolean

Required: No

Unwrap

Specifies whether an AWS Payment Cryptography key can be used to unwrap other keys.

Type: Boolean

Required: No

Verify

Specifies whether an AWS Payment Cryptography key can be used to verify signatures.

Type: Boolean

Required: No

Wrap

Specifies whether an AWS Payment Cryptography key can be used to wrap other keys.

Type: Boolean

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: