Lines Matching full:authorizations
682 <p>Generates a new cryptographic key, specifying associated authorizations, which
684 impossible to use a key in any way inconsistent with the authorizations
685 specified at generation time. With respect to authorizations that the secure
687 ensuring that the unenforceable authorizations associated with the key cannot
690 must allocate authorizations correctly between the hardware-enforced and
834 <p>Returns parameters and authorizations associated with the provided key, divided
956 <p>During this method, the following key authorizations must be enforced by the
966 in the key authorizations, unless the requested operation is a public key
1021 values must be in the key authorizations. If not, the method must return <code>KM_ERROR_INCOMPATIBLE_DIGEST</code>
1072 digest, which means that the specified value must be in the key authorizations.
1086 128, or less than the value of <code>KM_TAG_MIN_MAC_LENGTH</code> in the key authorizations. For MAC lengths greater than 128 or non-multiples of
1099 authorizations contain <a href="#km_tag_caller_nonce">KM_TAG_CALLER_NONCE</a>, then the caller may
1109 digest length, or less than the value of <code>KM_TAG_MIN_MAC_LENGTH</code> in the key authorizations.