<link>http://www.ncryptoki.com/forum.aspx</link> <description /> <docs>http://www.rssboard.org/rss-specification</docs> <generator>mojoPortal Forum module</generator> <item> <title>Re: Unextractable key - can it be, somehow, wrap it? Here further details: http://security.stackexchange.com/questions/105257/export-key-from-an-hsm-to-import-in-another-invalid-data-encoding

]]>
http://www.ncryptoki.com/Forums/Thread.aspx?pageid=9&t=254~-1#post963 p13r0 http://www.ncryptoki.com/Forums/Thread.aspx?pageid= Thu, 12 Nov 2015 16:13:23 GMT Re: Unextractable key - can it be, somehow, wrap it? My key I have to export is

 

NEVER_EXTRACTABLE=FALSE

EXTRACTABLE=FALSE

 

what does it mean? Can I or not?

]]>
http://www.ncryptoki.com/Forums/Thread.aspx?pageid=9&t=254~-1#post962 p13r0 http://www.ncryptoki.com/Forums/Thread.aspx?pageid= Thu, 12 Nov 2015 08:46:32 GMT
Re: Unextractable key - can it be, somehow, wrap it? if the key is marked as Unextractable you cannot extract it in any way.

if it is not, you can extract it by using WrapKey to export the key and UnwrapKey to import it in the other HSM.

Refer to PKCS#11 specifications to know more on C_WrapKey and C_UnwrapKey

]]>
http://www.ncryptoki.com/Forums/Thread.aspx?pageid=9&t=254~-1#post960 p13r0 http://www.ncryptoki.com/Forums/Thread.aspx?pageid= Wed, 11 Nov 2015 13:58:57 GMT
Unextractable key - can it be, somehow, wrap it? I've made this operation (wrap the key) with sensitive keys.

 

Is there a way to do also with unextractable key? My final goal is to export the key from one hsm to another and this can be the fastet method. 

 

Can you help me?

 

(this forum is read, but only few person write.. I hope to receive some answers)

]]>
http://www.ncryptoki.com/Forums/Thread.aspx?pageid=9&t=254~-1#post949 p13r0 http://www.ncryptoki.com/Forums/Thread.aspx?pageid= Thu, 29 Oct 2015 10:59:01 GMT