Parameters

For the definitions of the return_code, reason_code, exit_data_length, and exit_data parameters, see Parameters common to all verbs.

rule_array_count

Direction:	Input
Type:	Integer

A pointer to an integer variable containing the number of elements in the rule_array variable. This value must be 0.

rule_array

Direction:	Input
Type:	String array

This parameter is ignored.

source_key_identifier_length

Direction:	Input
Type:	Integer

The length of the source_key_identifier parameter. The maximum size is 8000 bytes. When the source_key_identifier parameter is a key label, this field specifies the length of the label.

source_key_identifier

Direction:	Input/Output
Type:	String

The internal or external token of a PKA private key or the label of a PKA private key. This can be the input or output from the PKA Key Import or PKA Key Generate verbs. This verb supports:

• RSA private key token formats supported on the CEX*C. If the source_key_identifier specifies a label for a private key that has been retained within a CEX*C, this verb extracts only the public key section of the token.
• ECC private key token formats
• PQC private key token formats, including ML-KEM, ML-DSA, CRYSTALS-Kyber, and CRYSTALS-Dilithium

target_public_key_identifier_length

Direction:	Input/Output
Type:	Integer

The length of the target_public_key_identifier parameter. The maximum size is 6500 bytes. On output, this field will be updated with the actual byte length of the target_public_key_identifier.

target_public_key_identifier

Direction:	Output
Type:	String

This field contains the token of the extracted PKA public key.