Object Encoding REQUIRED Capability Information Structure Streaming Boolean No Capability Asynchronous Boolean No Capability Attestation Boolean No Capability Batch Undo Boolean No Capability Batch Capability Boolean No Unwrap Mode Enumeration, see No 9.1.3.2.43 Destroy Action Enumeration, see No 9.1.3.2.44 Shredding Algorithm Enumeration, see No 9.1.3.2.45 RNG Mode Enumeration, see No 9.1.3.2.46 Table 42: Capability Information Structure Authenticated Encryption Additional Data The Authenticated Encryption Additional Data object is used in authenticated encryption and decryption operations that require the optional additional data to be provided by the client. Object Encoding REQUIRED Authenticated Encryption Byte String No Additional Data Table 43 Authenticated Encryption Additional Data Authenticated Encryption Tag The Authenticated Encryption Tag object is used to validate the integrity of the data encrypted and decrypted in Authenticated Encryption modes. It is an output from the encryption process and an input to the decryption process. See [SP800-38D]. Object Encoding REQUIRED Authenticated Encryption Byte String No Tag Table 44 Authenticated Encryption Tag Managed Objects Managed Objects are objects that are the subjects of key management operations, which are described in Sections 4 and 5. Managed Cryptographic Objects are the subset of Managed Objects that contain cryptographic material (e.g., certificates, keys, and secret data).
Object Encoding REQUIRED Capability Information Structure Streaming Capability Boolean No Asynchronous Capability Boolean No Attestation Capability Boolean No Batch Undo Capability Boolean No Batch Capability Boolean No Unwrap Mode Enumeration, see 9.1.3.2.43 No Destroy Action Enumeration, see 9.1.3.2.44 No Shredding Algorithm Enumeration, see 9.1.3.2.45 No RNG Mode Enumeration, see 9.1.3.2.46 No Table 42: Capability Information Structure Authenticated Encryption Additional Data The Authenticated Encryption Additional Data object is used in authenticated encryption and decryption operations that require the optional additional data to be provided by the client. Object Encoding REQUIRED Authenticated Encryption Additional Data Byte String No Table 43 Authenticated Encryption Additional Data Authenticated Encryption Tag The Authenticated Encryption Tag object is used to validate the integrity of the data encrypted and decrypted in Authenticated Encryption modes. It is an output from the encryption process and an input to the decryption process. See [SP800-38D]. Object Encoding REQUIRED Authenticated Encryption Tag Byte String No Table 44 Authenticated Encryption Tag Managed Objects Managed Objects are objects that are the subjects of key management operations, which are described in Sections 4 and 5. Managed Cryptographic Objects are the subset of Managed Objects that contain cryptographic material (e.g., certificates, keys, and secret data).