Key Management Interoperability Protocol Specification Version 1.1

Object Encoding REQUIREDTemplate-Attribute,Common Template-Attribute,Private Key Template-Attribute,Public Key Template-AttributeStructureName Structure, see 3.2 No, MAY be repeated.AttributeAttribute Object,see 2.1.1No, MAY be repeated393394395396397398399Table 26: Template-Attribute Object StructureName is the Name attribute of the Template object defined in Section 2.2.6.2.1.9 Extension InformationAn Extension Information object is a structure (see Table 27) describing Objects with Item Tag values inthe Extensions range. The Extension Name is a Text String that is used to name the Object (first columnof Table 213). The Extension Tag is the Item Tag Value of the Object (see Table 213). The ExtensionType is the Item Type Value of the Object (see Table 211).Object Encoding REQUIREDExtension Information StructureExtension Name Text String YesExtension Tag Integer NoExtension Type Integer No400401402403404405406407Table 27: Extension Information Structure2.2 Managed ObjectsManaged Objects are objects that are the subjects of key management operations, which are describedin Sections 4 and 5. Managed Cryptographic Objects are the subset of Managed Objects that containcryptographic material (e.g. certificates, keys, and secret data).2.2.1 CertificateA Managed Cryptographic Object that is a digital certificate. Its is a DER-encoded X.509 public keycertificate. For PGP certificates, it is a transferable public key in the OpenPGP message format.CertificateObject Encoding REQUIREDCertificate TypeStructureEnumeration, see9.1.3.2.6YesCertificate Value Byte String Yes408409410Table 28: Certificate Object Structure2.2.2 Symmetric KeyA Managed Cryptographic Object that is a symmetric key.kmip-spec-v1.1-cos01 21 September 2012Standards Track Work Product Copyright © OASIS Open 2012. All Rights Reserved. Page 26 of 164