Question

这是我的代码：

X9ECParameters x9Ec = NistNamedCurves.GetByName("P-256");
X962Parameters x962 = new X962Parameters(x9Ec);
byte[] paramsBytes = x962.Parameters.GetDerEncoded();

List<IObjectAttribute> publicKeyAttributes = new List<IObjectAttribute>
                        {
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_KEY_TYPE, CKK.CKK_EC),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_TOKEN, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_PRIVATE, false),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_LABEL, userParams.KeyLabel),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_ID, ckaId),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_ENCRYPT, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_VERIFY, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_VERIFY_RECOVER, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_WRAP, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_EC_PARAMS, paramsBytes)
                        };

List<IObjectAttribute> privateKeyAttributes = new List<IObjectAttribute>
                        {
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_KEY_TYPE, CKK.CKK_EC),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_TOKEN, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_PRIVATE, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_LABEL, userParams.KeyLabel),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_ID, ckaId),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_DECRYPT, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_SIGN, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_SIGN_RECOVER, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_UNWRAP, true),
                            session.Factories.ObjectAttributeFactory.Create(CKA.CKA_SENSITIVE, true)
                        };

然后我收到错误消息：

<块引用>

“方法 C_GenerateKeyPair 返回 CKR_ATTRIBUTE_VALUE_INVALID”

我是否遗漏了任何属性或这个模板有什么问题？有知道的朋友请帮忙，谢谢。

Answer 1

尝试删除加密/解密、包装/解包。它不像RSA，你不能这样做

pkcs11interop 生成密钥对（EC 或 ECDSA），得到错误

1 个答案: