Key Management Interoperability Protocol Specification Version 1.1
Key Management Interoperability Protocol Specification Version 1.1
Key Management Interoperability Protocol Specification Version 1.1
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
761762763764765766767768769770771772773774775776777778779 Export MAC Generate MAC Verify Derive <strong>Key</strong> Content Commitment <strong>Key</strong> Agreement Certificate Sign CRL Sign Generate Cryptogram Validate Cryptogram Translate Encrypt Translate Decrypt Translate Wrap Translate UnwrapThis list takes into consideration values that MAY appear in the <strong>Key</strong> Usage extension in an X.509certificate. However, the list does not consider the additional usages that MAY appear in the Extended<strong>Key</strong> Usage extension.X.509 <strong>Key</strong> Usage values SHALL be mapped to Cryptographic Usage Mask values in the followingmanner:X.509 <strong>Key</strong> Usage to Cryptographic Usage Mask MappingX.509 <strong>Key</strong> Usage Value Cryptographic Usage Mask ValuedigitalSignatureSign or VerifycontentCommitmentkeyEnciphermentdataEnciphermentkeyAgreementkeyCertSigncRLSignencipherOnlydecipherOnlyContent Commitment(Non Repudiation)Wrap <strong>Key</strong> or Unwrap <strong>Key</strong>Encrypt or Decrypt<strong>Key</strong> AgreementCertificate SignCRL SignEncryptDecrypt780781Table 78: X.509 <strong>Key</strong> Usage to Cryptographic Usage Mask MappingObjectCryptographic Usage MaskIntegerEncoding782Table 79: Cryptographic Usage Mask Attributekmip-spec-v<strong>1.1</strong>-cos01 21 September 2012Standards Track Work Product Copyright © OASIS Open 2012. All Rights Reserved. Page 48 of 164
Change language