tests: Explicitly set attributes that are checked for KBKDF

Signed-off-by: Jakub Jelen <jjelen@redhat.com>

Author: Jakuje

cryptoki/tests/basic.rs

@@ -2514,6 +2514,8 @@ fn kbkdf_additional_keys_counter_mode() -> TestResult {
             Attribute::ValueLen((AES128_BLOCK_SIZE as u64).into()),
             Attribute::Sign(true),
             Attribute::Verify(true),
+            Attribute::Encrypt(false),
+            Attribute::Decrypt(false),
         ],
         vec![
             Attribute::Token(true),
@@ -2522,6 +2524,8 @@ fn kbkdf_additional_keys_counter_mode() -> TestResult {
             Attribute::KeyType(KeyType::GENERIC_SECRET),
             Attribute::ValueLen(1.into()),
             Attribute::Derive(true),
+            Attribute::Encrypt(false),
+            Attribute::Decrypt(false),
         ],
     ];
 
@@ -2598,6 +2602,8 @@ fn kbkdf_additional_keys_counter_mode() -> TestResult {
             Attribute::Sign(true),
             Attribute::Verify(true),
             Attribute::Derive(false),
+            Attribute::Encrypt(false),
+            Attribute::Decrypt(false),
         ],
         vec![
             Attribute::Class(ObjectClass::SECRET_KEY),
@@ -2608,14 +2614,16 @@ fn kbkdf_additional_keys_counter_mode() -> TestResult {
             Attribute::Sign(false),
             Attribute::Verify(false),
             Attribute::Derive(true),
+            Attribute::Encrypt(false),
+            Attribute::Decrypt(false),
         ],
     ];
 
     for (key, wanted_attributes) in derived_keys.iter().zip(wanted_attributes.iter().cycle()) {
         let have_attributes = session.get_attributes(*key, &attributes_to_check)?;
 
         for (value_wanted, value_have) in wanted_attributes.iter().zip(have_attributes.iter()) {
-            assert_eq!(value_wanted, value_have);
+            assert_eq!(value_wanted, value_have, "The generated key {key} has unexpected attribute value");
         }
     }
 
@@ -2670,6 +2678,8 @@ fn kbkdf_additional_keys_feedback_mode() -> TestResult {
             Attribute::ValueLen((AES128_BLOCK_SIZE as u64).into()),
             Attribute::Sign(true),
             Attribute::Verify(true),
+            Attribute::Encrypt(false),
+            Attribute::Decrypt(false),
         ],
         vec![
             Attribute::Token(true),
@@ -2678,6 +2688,8 @@ fn kbkdf_additional_keys_feedback_mode() -> TestResult {
             Attribute::KeyType(KeyType::GENERIC_SECRET),
             Attribute::ValueLen(1.into()),
             Attribute::Derive(true),
+            Attribute::Encrypt(false),
+            Attribute::Decrypt(false),
         ],
     ];