Merge branch 'local'

1 files changed, 8 insertions, 4 deletions

diff --git a/include/ncrypto/ncrypto.h b/include/ncrypto/ncrypto.h
index 01964f9..024d5a7 100644
--- a/include/ncrypto/ncrypto.h
+++ b/include/ncrypto/ncrypto.h
@@ -55,10 +55,15 @@ CK_RV ncr_get_random_bytes (void *dest, size_t size);
 
 struct ncr_symm_key;
 
+/* "Sensitive" corresponds to CKA_SENSITIVE. */
 CK_RV ncr_symm_key_create (struct ncr_symm_key **key, CK_KEY_TYPE type,
-			   const void *value, size_t value_size);
+			   _Bool sensitive, const void *value,
+			   size_t value_size);
 CK_RV ncr_symm_key_generate (struct ncr_symm_key **key, CK_MECHANISM_TYPE mech,
-			     size_t value_size);
+			     _Bool sensitive, size_t value_size);
+CK_RV ncr_symm_key_set_sensitive (struct ncr_symm_key *key);
+CK_RV ncr_symm_key_export (struct ncr_symm_key *key, void *dest,
+			   size_t *dest_size_ptr);
 CK_RV ncr_symm_key_destroy (struct ncr_symm_key *key);
 
  /* Asymmetric keys */
@@ -147,8 +152,7 @@ CK_RV ncr_digest_standalone (CK_MECHANISM_TYPE mech, void *dest,
 
 struct ncr_symm_cipher_session;
 
-/* Note that for *_ECB and *_CBC, the input must be block-aligned.  For
-   *_CBC_PAD, it does not have to be. */
+/* Note that for *_ECB and *_CBC, the input must be block-aligned. */
 
 /* Session lifetime management. */
 CK_RV ncr_symm_cipher_alloc (struct ncr_symm_cipher_session **sess,