Sun Oracle Crypto Accelerator 6000 Board, User Manual

Page: 152 / 266

130 Sun Crypto Accelerator 6000 Board User’s Guide for Version 1.1 • February 2013
TABLE 5-12
lists the return values for the
fs_import_key()
function.
Export Key Function
fs_export_key()
The board must allow users to move keys from one device to another. Additionally,
the peer device might not be a Sun Crypto Accelerator 6000 board. The export key
function enables this feature and allows users to export keys from the Sun Crypto
Accelerator 6000 board. How the exported keys are transported to the peer is
determined by the application developer.
The syntax for the
fs_export_key()
function is as follows:
TABLE 5-13
lists the parameters for the
fs_export_key()
function.
TABLE 5-12
fs_import_key()
Function Return Values
Return Value Description
fsOK
The
oKey
is filled in for this case if the key is
successfully imported
fsInvalidKeyType
Invalid import key type
fsInvalidKeyUsage
Unsupported key usage type
fsInvalidKEK
Invalid KEK
fsInvalidKey
Import key is invalid
fsInvalidState
Device is not in proper state to handle command
fsError
Processing error
fsReturn_t fs_export_key(fsSessHandle_t handle, fsKeyUsage_t
usage, fsKey_t *KEK, fsKey_t *iKey, fsKey917_t *oKey, boolean_t
useVariants);
TABLE 5-13
fs_export_key()
Function Parameters
Parameter Description
handle
Session handle returned by the
fs_session_open()
function
usage
Type of intended key usage: TPK, ZWK, PEK, CVK, and so on
KEK
Key shared with the peer node with which the exported key is
encrypted