title: Private Key Template Inconsistent
body: <p>I am attempting to generate an RSA key pair inside a SafeNet HSM. I copied the example templates specified in PKCS11 for the private and public keys. When i generate the key pair everything works fine. However, when i specify for the private key the following attribute values, the C_GenerateKeyPair returns CKR_TEMPLATE_INCONSISTENT:</p>
  
  <ol>
  <li>CKA_DECRYPT = false.</li>
  <li>CKA_UNWRAP = true.</li>
  </ol>
  
  <p>I can imagine why i get template inconsistent but i just want to verify it. Since the unwrap operation is in it's essence a decrypt operation, then it is not consistent to allow a key to unwrap while it cannot decrypt.</p>
  
  <p>However, shouldn't these two operations be treated separately by PKCS11 implementations?</p>
  
  <p>Thanks in advance.  </p>