In PKCS11 specification v2.40, we see some confusion with
CKA_VALUE_LEN attribute and
From PKCS11 spec 2.40 section 2.8.2,
2 -> MUST not be specified when object is created with
3 -> MUST be specified when object is generated with
6 -> MUST not be specified when object is unwrapped with
In the AES-ECB and AES-CBC, spec tells to pass
CKA_VALUE_LEN (section 2.8.4),
So what is expected from application? Do the applications need to pass
CKA_VALUE_LEN during unwrap?
NOTE: Even PKCS11 spec 3.0 is also saying the same thing.