Perhaps reword "It is not specified in Cryptoki that all mechanisms supported by the token are implemented in hardware in the token, or which mechanisms are implemented in hardware and which in firmware/software in the token, when CKF_HW_SLOT is true." to be "Implementations should not imply an interpretation about the security properties based on the CKF_HW_SLOT. The flag is intended purely as an indicator that the slot is a physical mechanism. How the implementation that offers the physical slot implements mechanisms (software/firmware/hardware) is unrelated to this flag". Tim.