EC keys: unconditionally fetch EC_POINT

- vendor optimization (e.g. Thales Luna) to have CKA_EC_POINT in CKO_PRIVATE_KEY - avoids having to store the public key - for future optimization: skip find_associated_obj if EC key already has EC_POINT - libp11 equivalent: OpenSC/libp11@281ccb3 Signed-of-by: S-P Chan <[email protected]>
latchset · Feb 22, 2024 · 84720ad · 84720ad
1 parent 8055658
commit 84720ad
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/objects.c b/src/objects.c
@@ -796,6 +796,12 @@ static CK_RV fetch_ec_key(P11PROV_CTX *ctx, P11PROV_SESSION *session,
     FA_SET_BUF_ALLOC(attrs, num, CKA_EC_PARAMS, true);
     if (key->class == CKO_PUBLIC_KEY) {
         FA_SET_BUF_ALLOC(attrs, num, CKA_EC_POINT, true);
+    } else {
+        /* known vendor optimization to avoid storing
+         * EC public key on HSM; can avoid
+         * find_associated_obj later
+         */
+        FA_SET_BUF_ALLOC(attrs, num, CKA_EC_POINT, false);
     }
     FA_SET_BUF_ALLOC(attrs, num, CKA_ID, false);
     FA_SET_BUF_ALLOC(attrs, num, CKA_LABEL, false);