Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris. # Tabel atribut perpustakaan PKCS \#11 untuk AWS CloudHSM SDK Klien 5 Tabel pustaka PKCS \#11 untuk AWS CloudHSM berisi daftar atribut yang berbeda menurut jenis kunci. Ini menunjukkan apakah atribut yang diberikan didukung untuk jenis kunci tertentu saat menggunakan fungsi kriptografi tertentu dengan AWS CloudHSM. **Legenda: ** + ✔ menunjukkan bahwa CloudHSM mendukung atribut untuk jenis kunci tertentu. + ✖ menunjukkan bahwa CloudHSM tidak mendukung atribut untuk jenis kunci tertentu. + R menunjukkan bahwa nilai atribut diatur ke hanya-baca untuk jenis kunci tertentu. + S menunjukkan bahwa atribut tidak dapat dibaca oleh `GetAttributeValue` karena sensitif. + Sel kosong di kolom Nilai Default menunjukkan bahwa tidak ada nilai default tertentu yang ditetapkan untuk atribut. ## GenerateKeyPair

Atribut	Tipe Kunci						Nilai Default
	EC pribadi	Publik EC	RSA pribadi	RSA publik	ML-DSA pribadi	ML-DSA publik
`CKA_CLASS`	✔	✔	✔	✔	✔	✔
`CKA_KEY_TYPE`	✔	✔	✔	✔	✔	✔
`CKA_LABEL`	✔	✔	✔	✔	✔	✔
`CKA_ID`	✔	✔	✔	✔	✔	✔
`CKA_LOCAL`	R	R	R	R	R	R	Benar
`CKA_TOKEN`	✔	✔	✔	✔	✔	✔	Salah
`CKA_PRIVATE`	✔1	✔1	✔1	✔1	✔1	✔1	Benar
`CKA_ENCRYPT`	✖	✔3	✖	✔	✖	✖	Salah
`CKA_DECRYPT`	✔3	✖	✔	✖	✖	✖	Salah
`CKA_DERIVE`	✔	✔	✔	✔	✖	✖	Salah
`CKA_MODIFIABLE`	✔	✔	✔	✔	✔	✔	Benar
`CKA_DESTROYABLE`	✔	✔	✔	✔	✔	✔	Benar
`CKA_SIGN`	✔	✖	✔	✖	✔	✖	Salah
`CKA_SIGN_RECOVER`	✖	✖	✖	✖	✖	✖
`CKA_VERIFY`	✖	✔	✖	✔	✖	✔	Salah
`CKA_VERIFY_RECOVER`	✖	✖	✖	✖	✖	✖
`CKA_WRAP`	✖	✔3	✖	✔	✖	✖	Salah
`CKA_WRAP_TEMPLATE`	✖	✔	✖	✔	✖	✖
`CKA_TRUSTED`	✖	✔	✖	✔	✖	✔	Salah
`CKA_WRAP_WITH_TRUSTED`	✔	✖	✔	✖	✔	✖	Salah
`CKA_UNWRAP`	✔3	✖	✔	✖	✖	✖	Salah
`CKA_UNWRAP_TEMPLATE`	✔	✖	✔	✖	✖	✖
`CKA_SENSITIVE`	✔1	✖	✔1	✖	✔	✖	Benar
`CKA_ALWAYS_SENSITIVE`	R	✖	R	✖	✖	✖
`CKA_EXTRACTABLE`	✔	✖	✔	✖	✔	✖	Benar
`CKA_NEVER_EXTRACTABLE`	R	✖	R	✖	✖	✖
`CKA_MODULUS`	✖	✖	✖	✖	✖	✖
`CKA_MODULUS_BITS`	✖	✖	✖	✔2	✖	✖
`CKA_PRIME_1`	✖	✖	✖	✖	✖	✖
`CKA_PRIME_2`	✖	✖	✖	✖	✖	✖
`CKA_COEFFICIENT`	✖	✖	✖	✖	✖	✖
`CKA_EXPONENT_1`	✖	✖	✖	✖	✖	✖
`CKA_EXPONENT_2`	✖	✖	✖	✖	✖	✖
`CKA_PRIVATE_EXPONENT`	✖	✖	✖	✖	✖	✖
`CKA_PUBLIC_EXPONENT`	✖	✖	✖	✔2	✖	✖
`CKA_EC_PARAMS`	✖	✔2	✖	✖	✖	✖
`CKA_EC_POINT`	✖	✖	✖	✖	✖	✖
`CKA_VALUE`	✖	✖	✖	✖	✖	✖
`CKA_VALUE_LEN`	✖	✖	✖	✖	✖	✖
`CKA_CHECK_VALUE`	R	R	R	R	✖	✖
`CKA_CLOUDHSM_PARAMETER_SET`	✖	✖	✖	✖	✔	✔

## GenerateKey

Atribut	Tipe Kunci			Nilai Default
	AES	DES3	Rahasia Generik
`CKA_CLASS`	✔	✔	✔
`CKA_KEY_TYPE`	✔	✔	✔
`CKA_LABEL`	✔	✔	✔
`CKA_ID`	✔	✔	✔
`CKA_LOCAL`	R	R	R	Benar
`CKA_TOKEN`	✔	✔	✔	Salah
`CKA_PRIVATE`	✔1	✔1	✔1	Benar
`CKA_ENCRYPT`	✔	✔	✖	Salah
`CKA_DECRYPT`	✔	✔	✖	Salah
`CKA_DERIVE`	✔	✔	✔	Salah
`CKA_MODIFIABLE`	✔	✔	✔	Benar
`CKA_DESTROYABLE`	✔	✔	✔	Benar
`CKA_SIGN`	✔	✔	✔	Benar
`CKA_SIGN_RECOVER`	✖	✖	✖
`CKA_VERIFY`	✔	✔	✔	Benar
`CKA_VERIFY_RECOVER`	✖	✖	✖
`CKA_WRAP`	✔	✔	✖	Salah
`CKA_WRAP_TEMPLATE`	✔	✔	✖
`CKA_TRUSTED`	✔	✔	✖	Salah
`CKA_WRAP_WITH_TRUSTED`	✔	✔	✔	Salah
`CKA_UNWRAP`	✔	✔	✖	Salah
`CKA_UNWRAP_TEMPLATE`	✔	✔	✖
`CKA_SENSITIVE`	✔	✔	✔	Benar
`CKA_ALWAYS_SENSITIVE`	✖	✖	✖
`CKA_EXTRACTABLE`	✔	✔	✔	Benar
`CKA_NEVER_EXTRACTABLE`	R	R	R
`CKA_MODULUS`	✖	✖	✖
`CKA_MODULUS_BITS`	✖	✖	✖
`CKA_PRIME_1`	✖	✖	✖
`CKA_PRIME_2`	✖	✖	✖
`CKA_COEFFICIENT`	✖	✖	✖
`CKA_EXPONENT_1`	✖	✖	✖
`CKA_EXPONENT_2`	✖	✖	✖
`CKA_PRIVATE_EXPONENT`	✖	✖	✖
`CKA_PUBLIC_EXPONENT`	✖	✖	✖
`CKA_EC_PARAMS`	✖	✖	✖
`CKA_EC_POINT`	✖	✖	✖
`CKA_VALUE`	✖	✖	✖
`CKA_VALUE_LEN`	✔2	✖	✔2
`CKA_CHECK_VALUE`	R	R	R

## CreateObject **ML-DSA dan CreateObject** ML-DSA impor kunci melalui `C_CreateObject` tidak didukung. Untuk menggunakan ML-DSA kunci, buat langsung di HSM menggunakan`C_GenerateKeyPair`.

Atribut	Tipe Kunci							Nilai Default
	EC pribadi	Publik EC	RSA pribadi	RSA publik	AES	DES3	Rahasia Generik
`CKA_CLASS`	✔2	✔2	✔2	✔2	✔2	✔2	✔2
`CKA_KEY_TYPE`	✔2	✔2	✔2	✔2	✔2	✔2	✔2
`CKA_LABEL`	✔	✔	✔	✔	✔	✔	✔
`CKA_ID`	✔	✔	✔	✔	✔	✔	✔
`CKA_LOCAL`	R	R	R	R	R	R	R	Salah
`CKA_TOKEN`	✔	✔	✔	✔	✔	✔	✔	Salah
`CKA_PRIVATE`	✔1	✔1	✔1	✔1	✔1	✔1	✔1	Benar
`CKA_ENCRYPT`	✖	✖	✖	✔	✔	✔	✖	Salah
`CKA_DECRYPT`	✖	✖	✔	✖	✔	✔	✖	Salah
`CKA_DERIVE`	✔	✔	✔	✔	✔	✔	✔	Salah
`CKA_MODIFIABLE`	✔	✔	✔	✔	✔	✔	✔	Benar
`CKA_DESTROYABLE`	✔	✔	✔	✔	✔	✔	✔	Benar
`CKA_SIGN`	✔	✖	✔	✖	✔	✔	✔	Salah
`CKA_SIGN_RECOVER`	✖	✖	✖	✖	✖	✖	✖	Salah
`CKA_VERIFY`	✖	✔	✖	✔	✔	✔	✔	Salah
`CKA_VERIFY_RECOVER`	✖	✖	✖	✖	✖	✖	✖
`CKA_WRAP`	✖	✖	✖	✔	✔	✔	✖	Salah
`CKA_WRAP_TEMPLATE`	✖	✔	✖	✔	✔	✔	✖
`CKA_TRUSTED`	✖	✔	✖	✔	✔	✔	✖	Salah
`CKA_WRAP_WITH_TRUSTED`	✔	✖	✔	✖	✔	✔	✔	Salah
`CKA_UNWRAP`	✖	✖	✔	✖	✔	✔	✖	Salah
`CKA_UNWRAP_TEMPLATE`	✔	✖	✔	✖	✔	✔	✖
`CKA_SENSITIVE`	✔	✖	✔	✖	✔	✔	✔	Benar
`CKA_ALWAYS_SENSITIVE`	R	✖	R	✖	R	R	R
`CKA_EXTRACTABLE`	✔	✖	✔	✖	✔	✔	✔	Benar
`CKA_NEVER_EXTRACTABLE`	R	✖	R	✖	R	R	R
`CKA_MODULUS`	✖	✖	✔2	✔2	✖	✖	✖
`CKA_MODULUS_BITS`	✖	✖	✖	✖	✖	✖	✖
`CKA_PRIME_1`	✖	✖	✔	✖	✖	✖	✖
`CKA_PRIME_2`	✖	✖	✔	✖	✖	✖	✖
`CKA_COEFFICIENT`	✖	✖	✔	✖	✖	✖	✖
`CKA_EXPONENT_1`	✖	✖	✔	✖	✖	✖	✖
`CKA_EXPONENT_2`	✖	✖	✔	✖	✖	✖	✖
`CKA_PRIVATE_EXPONENT`	✖	✖	✔2	✖	✖	✖	✖
`CKA_PUBLIC_EXPONENT`	✖	✖	✔2	✔2	✖	✖	✖
`CKA_EC_PARAMS`	✔2	✔2	✖	✖	✖	✖	✖
`CKA_EC_POINT`	✖	✔2	✖	✖	✖	✖	✖
`CKA_VALUE`	✔2	✖	✖	✖	✔2	✔2	✔2
`CKA_VALUE_LEN`	✖	✖	✖	✖	✖	✖	✖
`CKA_CHECK_VALUE`	R	R	R	R	R	R	R

## UnwrapKey

Atribut	Tipe Kunci					Nilai Default
	EC pribadi	RSA pribadi	AES	DES3	Rahasia Generik
`CKA_CLASS`	✔2	✔2	✔2	✔2	✔2
`CKA_KEY_TYPE`	✔2	✔2	✔2	✔2	✔2
`CKA_LABEL`	✔	✔	✔	✔	✔
`CKA_ID`	✔	✔	✔	✔	✔
`CKA_LOCAL`	R	R	R	R	R	Salah
`CKA_TOKEN`	✔	✔	✔	✔	✔	Salah
`CKA_PRIVATE`	✔1	✔1	✔1	✔1	✔1	Benar
`CKA_ENCRYPT`	✖	✖	✔	✔	✖	Salah
`CKA_DECRYPT`	✖	✔	✔	✔	✖	Salah
`CKA_DERIVE`	✔	✔	✔	✔	✔	Salah
`CKA_MODIFIABLE`	✔	✔	✔	✔	✔	Benar
`CKA_DESTROYABLE`	✔	✔	✔	✔	✔	Benar
`CKA_SIGN`	✔	✔	✔	✔	✔	Salah
`CKA_SIGN_RECOVER`	✖	✖	✖	✖	✖	Salah
`CKA_VERIFY`	✖	✖	✔	✔	✔	Salah
`CKA_VERIFY_RECOVER`	✖	✖	✖	✖	✖
`CKA_WRAP`	✖	✖	✔	✔	✖	Salah
`CKA_UNWRAP`	✖	✔	✔	✔	✖	Salah
`CKA_SENSITIVE`	✔	✔	✔	✔	✔	Benar
`CKA_EXTRACTABLE`	✔	✔	✔	✔	✔	Benar
`CKA_NEVER_EXTRACTABLE`	R	R	R	R	R
`CKA_ALWAYS_SENSITIVE`	R	R	R	R	R
`CKA_MODULUS`	✖	✖	✖	✖	✖
`CKA_MODULUS_BITS`	✖	✖	✖	✖	✖
`CKA_PRIME_1`	✖	✖	✖	✖	✖
`CKA_PRIME_2`	✖	✖	✖	✖	✖
`CKA_COEFFICIENT`	✖	✖	✖	✖	✖
`CKA_EXPONENT_1`	✖	✖	✖	✖	✖
`CKA_EXPONENT_2`	✖	✖	✖	✖	✖
`CKA_PRIVATE_EXPONENT`	✖	✖	✖	✖	✖
`CKA_PUBLIC_EXPONENT`	✖	✖	✖	✖	✖
`CKA_EC_PARAMS`	✖	✖	✖	✖	✖
`CKA_EC_POINT`	✖	✖	✖	✖	✖
`CKA_VALUE`	✖	✖	✖	✖	✖
`CKA_VALUE_LEN`	✖	✖	✖	✖	✖
`CKA_CHECK_VALUE`	R	R	R	R	R

## DeriveKey

Atribut	Tipe Kunci			Nilai Default
	AES	DES3	Rahasia Generik
`CKA_CLASS`	✔2	✔2	✔2
`CKA_KEY_TYPE`	✔2	✔2	✔2
`CKA_LABEL`	✔	✔	✔
`CKA_ID`	✔	✔	✔
`CKA_LOCAL`	R	R	R	Benar
`CKA_TOKEN`	✔	✔	✔	Salah
`CKA_PRIVATE`	✔1	✔1	✔1	Benar
`CKA_ENCRYPT`	✔	✔	✖	Salah
`CKA_DECRYPT`	✔	✔	✖	Salah
`CKA_DERIVE`	✔	✔	✔	Salah
`CKA_MODIFIABLE`	✔	✔	✔	Benar
`CKA_DESTROYABLE`	✔	✔	✔	Benar
`CKA_SIGN`	✔	✔	✔	Salah
`CKA_SIGN_RECOVER`	✖	✖	✖
`CKA_VERIFY`	✔	✔	✔	Salah
`CKA_VERIFY_RECOVER`	✖	✖	✖
`CKA_WRAP`	✔	✔	✖	Salah
`CKA_UNWRAP`	✔	✔	✖	False
`CKA_SENSITIVE`	R	R	R	True
`CKA_EXTRACTABLE`	✔	✔	✔	Benar
`CKA_NEVER_EXTRACTABLE`	R	R	R
`CKA_ALWAYS_SENSITIVE`	R	R	R
`CKA_MODULUS`	✖	✖	✖
`CKA_MODULUS_BITS`	✖	✖	✖
`CKA_PRIME_1`	✖	✖	✖
`CKA_PRIME_2`	✖	✖	✖
`CKA_COEFFICIENT`	✖	✖	✖
`CKA_EXPONENT_1`	✖	✖	✖
`CKA_EXPONENT_2`	✖	✖	✖
`CKA_PRIVATE_EXPONENT`	✖	✖	✖
`CKA_PUBLIC_EXPONENT`	✖	✖	✖
`CKA_EC_PARAMS`	✖	✖	✖
`CKA_EC_POINT`	✖	✖	✖
`CKA_VALUE`	✖	✖	✖
`CKA_VALUE_LEN`	✔2	✖	✔2
`CKA_CHECK_VALUE`	R	R	R

## GetAttributeValue

Atribut	Tipe Kunci
	EC pribadi	Publik EC	RSA pribadi	RSA publik	ML-DSA pribadi	ML-DSA publik	AES	DES3	Rahasia Generik
`CKA_CLASS`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_KEY_TYPE`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_LABEL`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_ID`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_LOCAL`	✔	✔	✔	✔	R	R	✔	✔	✔
`CKA_TOKEN`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_PRIVATE`	✔1	✔1	✔1	✔1	✔	✔	✔1	✔1	✔1
`CKA_ENCRYPT`	✖	✖	✖	✔	✖	✖	✔	✔	✖
`CKA_DECRYPT`	✖	✖	✔	✖	✖	✖	✔	✔	✖
`CKA_DERIVE`	✔	✔	✔	✔	✖	✖	✔	✔	✔
`CKA_MODIFIABLE`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_DESTROYABLE`	✔	✔	✔	✔	✔	✔	✔	✔	✔
`CKA_SIGN`	✔	✖	✔	✖	✔	✖	✔	✔	✔
`CKA_SIGN_RECOVER`	✖	✖	✔	✖	✖	✖	✖	✖	✖
`CKA_VERIFY`	✖	✔	✖	✔	✖	✔	✔	✔	✔
`CKA_VERIFY_RECOVER`	✖	✖	✖	✔	✖	✖	✖	✖	✖
`CKA_WRAP`	✖	✖	✖	✔	✖	✖	✔	✔	✖
`CKA_WRAP_TEMPLATE`	✖	✔	✖	✔	✖	✖	✔	✔	✖
`CKA_TRUSTED`	✖	✔	✖	✔	✖	✔	✔	✔	✔
`CKA_WRAP_WITH_TRUSTED`	✔	✖	✔	✖	✔	✖	✔	✔	✔
`CKA_UNWRAP`	✖	✖	✔	✖	✖	✖	✔	✔	✖
`CKA_UNWRAP_TEMPLATE`	✔	✖	✔	✖	✖	✖	✔	✔	✖
`CKA_SENSITIVE`	✔	✖	✔	✖	✔	✖	✔	✔	✔
`CKA_EXTRACTABLE`	✔	✖	✔	✖	✔	✖	✔	✔	✔
`CKA_NEVER_EXTRACTABLE`	✔	✖	✔	✖	R	R	✔	✔	✔
`CKA_ALWAYS_SENSITIVE`	R	R	R	R	R	R	R	R	R
`CKA_MODULUS`	✖	✖	✔	✔	✖	✖	✖	✖	✖
`CKA_MODULUS_BITS`	✖	✖	✖	✔	✖	✖	✖	✖	✖
`CKA_PRIME_1`	✖	✖	S	✖	✖	✖	✖	✖	✖
`CKA_PRIME_2`	✖	✖	S	✖	✖	✖	✖	✖	✖
`CKA_COEFFICIENT`	✖	✖	S	✖	✖	✖	✖	✖	✖
`CKA_EXPONENT_1`	✖	✖	S	✖	✖	✖	✖	✖	✖
`CKA_EXPONENT_2`	✖	✖	S	✖	✖	✖	✖	✖	✖
`CKA_PRIVATE_EXPONENT`	✖	✖	S	✖	✖	✖	✖	✖	✖
`CKA_PUBLIC_EXPONENT`	✖	✖	✔	✔	✖	✖	✖	✖	✖
`CKA_EC_PARAMS`	✔	✔	✖	✖	✖	✖	✖	✖	✖
`CKA_EC_POINT`	✖	✔	✖	✖	✖	✖	✖	✖	✖
`CKA_VALUE`	D	✖	✖	✖	✖	✖	✔	✔	✔
`CKA_VALUE_LEN`	✖	✖	✖	✖	✖	✖	✔	✖	✔
`CKA_CHECK_VALUE`	✔	✔	✔	✔	✖	✖	✔	✔	✖
`CKA_CLOUDHSM_PARAMETER_SET`	✖	✖	✖	✖	R	R	✖	✖	✖

**Anotasi atribut ** + [1] Atribut ini sebagian didukung oleh firmware dan harus secara eksplisit diatur hanya ke nilai default. + [2] Atribut wajib. + [3] Untuk kunci Ed25519 (kunci EC dengan kurva ed25519): CKA\_ENCRYPT, CKA\_DECRYPT, CKA\_WRAP, CKA\_UNWRAP, dan CKA\_DERIVE tidak berfungsi. Kunci Ed25519 hanya untuk penandatanganan dan tidak mendukung operasi enkripsi, pembungkus, atau derivasi kunci.