pkcs11/p11_cipher: make AES keys ephemeral objects

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>

diff --git a/lib/pkcs11/p11_cipher.c b/lib/pkcs11/p11_cipher.c
index 63655021b01fa1701469ce461de3be8756666eef..7f749de902216d1f52f5d26a21bf8126ec78a84f 100644 (file)
--- a/lib/pkcs11/p11_cipher.c
+++ b/lib/pkcs11/p11_cipher.c
@@ -183,7 +183,6 @@ static int aes_set_key(struct p11_cipher_ctx *ctx, const void *key,
        struct ck_attribute attrs[] = {
                { CKA_CLASS, &attr_class, sizeof(attr_class) },
                { CKA_KEY_TYPE, &attr_key_type, sizeof(attr_key_type) },
-               { CKA_TOKEN, &attr_true, sizeof(attr_true) },
                { CKA_ENCRYPT, &attr_true, sizeof(attr_true) },
                { CKA_DECRYPT, &attr_true, sizeof(attr_true) },
                { CKA_LABEL, label, sizeof(label) - 1 },