I want to use C_SetAttributeValue to set CKA_PRIVATE from false to true. The spec doesn't call that out as an allowed operation, but it does say you can us C_CopyObject in that way. That seems a bit odd to me. The spec does spell out that one can set CKA_SENSITIVE to true via C_SetAttributeValue. I'm a bit surprised one can set an object sensitive but not private. This is in 10.1.2 and 10.1.3 of the PKCS #11 v2.20 spec.
What is other people's take on this and do other implementations prevent this attribute from being set? Tony
