Use and operations constrain keys
03A key intended for signing should not automatically be used for unrelated operations.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 4.2 ↗
RFC 7517 · § 4.2EXAMPLE
3 / 3
03
Wrong operation
Reject using this key to decrypt merely because it is available.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
use identifies intended public-key use, such as sig or enc.
- use identifies intended public-key use, such as sig or enc.
- key_ops identifies permitted operations such as verify or decrypt.
- If use and key_ops both appear, their values must be consistent.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy