Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 1cf361530d TESTCASES: Add tests for CKR_BUFFER_TOO_SMALL on encrypt and decrypt master Ingo Franzki 2026-10-19 16:49:34 +02:00
• 3f6fb6d30b TESTCASES: Add unit tests for PKCS#7 padding and unpadding Ingo Franzki 2026-10-19 16:16:08 +02:00
• 594f41b08b TOOLS: Fix ICSF mock server to handle too short output buffers for en/decypt Ingo Franzki 2026-10-20 09:10:20 +02:00
• 73d27be1ac ICSF: Fix Output buffer size check for CBC-PAD decryption Ingo Franzki 2026-10-20 09:08:56 +02:00
• e5cf411278 EP11: Return required output size on CKR_BUFFER_TOO_SMALL Ingo Franzki 2026-10-20 11:51:56 +02:00
• 5dcf5ef3d2 COMMON: Return required output size on CKR_BUFFER_TOO_SMALL Ingo Franzki 2026-10-20 10:10:03 +02:00
• 6887ee91a4 COMMON: Cleanse output buffer in case of unpadding errors Ingo Franzki 2026-10-20 10:52:46 +02:00
• d5beecc9ca COMMON: Fix AES/DES/DES3-CBC-PAD PKCS#7 unpadding Ingo Franzki 2026-10-19 11:19:23 +02:00
• f14f7a916f COMMON: Fix out-of-bounds access with AES/DES/DES3-CBC-PAD decryption Ingo Franzki 2026-10-19 11:15:39 +02:00
• 238eb40a57 TESTCASES: Enhance the ASN.1 unit tests to test for PKCS#8 and SPKI compatibility Ingo Franzki 2026-10-16 08:23:45 +02:00
• 9415b058cd TESTCASES: Correct the ASN.1 unit tests for Edwards and Montgomery keys Ingo Franzki 2026-10-14 16:15:48 +02:00
• 595ca62ada COMMON: Fix BER encoding and decoding of Edwards and Montgomery private keys Ingo Franzki 2026-10-14 16:15:30 +02:00
• 1fe94e4332 TOOLS: Enhance ICSF mock server to support wrap and unwrap of DH private keys Ingo Franzki 2026-10-15 13:11:12 +02:00
• 9c3440a37d TOOLS: Fix ICSF mock server to handle sensitive attributes correctly Ingo Franzki 2026-10-14 16:25:13 +02:00
• e8cadb2484 TESTCASES: Check unwrapped DH, ML-DSA and ML-KEM private keys too Alexandre Laroche 2026-10-14 15:51:09 +02:00
• 7131685d35 TESTCASES: Check CKA_SENSITIVE and CKA_EXTRACTABLE of unwrapped keys Alexandre Laroche 2026-10-14 14:30:43 +02:00
• 2345b3c7e9 COMMON: Honour CKA_SENSITIVE and CKA_EXTRACTABLE from the unwrap template Alexandre Laroche 2026-10-14 08:30:43 -04:00
• 0d2e914258 COMMON: NULLify pContext and ulContextLen in ML-DSA mechanism parameter copy Ingo Franzki 2026-10-13 16:45:24 +02:00
• ebab4b48e0 COMMON: Cleanup operation in init failure Ingo Franzki 2026-10-13 16:41:24 +02:00
• 2acb7a25bf EP11: Fix cleanup in case EC-AGGREGATE mechanism parameter deep-copy fails Ingo Franzki 2026-10-13 16:19:04 +02:00
• 350f61c775 COMMON: Fix error handling when deep-copy a mechanism parameter fails Ingo Franzki 2026-10-13 16:15:03 +02:00
• f9e05e3742 COMMON/EP11: Reject saving the state for mechanisms with deep-copied parameters Ingo Franzki 2026-10-13 15:34:28 +02:00
• b663eaa8f3 COMMON: Fix memory leak of deep-copied mechanism parameters on session close Ingo Franzki 2026-10-13 15:25:05 +02:00
• 1ae575b090 CI: Stop an already running ICSF mock server before starting it again Ingo Franzki 2026-10-14 09:08:35 +02:00
• a57f9a02c3 TESTCASES: Add unit tests for invalid AlgorithmIdentifier decoding Ingo Franzki 2026-10-12 10:10:33 +02:00
• 137c741923 COMMON: Decoding EC public and private keys must check the OID Ingo Franzki 2026-10-12 13:46:00 +02:00
• bab7e26028 COMMON: Fix ber_decode_SPKI to not assume a single byte OID length Ingo Franzki 2026-10-12 09:24:45 +02:00
• 849d1363ac COMMON: Fix out-of-bounds read when decoding public or private keys Ingo Franzki 2026-10-09 08:47:28 +02:00
• 0e0a8c807f CI: 'make ci-cleanup' should also remove the testcase log files Ingo Franzki 2026-10-12 15:15:43 +02:00
• e458b88bda CI: Add ci-check-results make target to check for failed tests Ingo Franzki 2026-10-12 14:52:21 +02:00
• 6fa1b5c03e ICSF: Correct key sizes and flags in the mechanism table Ingo Franzki 2026-10-07 16:19:34 +02:00
• bff8d4ae5a DOC: Update README.icsf_stdll to reflect the lasted changes Ingo Franzki 2026-10-07 14:51:50 +02:00
• 4640c3c730 TOOLS: Update ICSF mock server to generate and require complaint DH keys Ingo Franzki 2026-10-07 13:50:04 +02:00
• da1daeaaab TESTCASES: Use a DH key that is complaint per NIST SP 800-56A R3 5.6.2.1.2 Ingo Franzki 2026-10-07 13:33:54 +02:00
• 73b2f41d77 P11KMIP: Fix NULL-check, wrong dereference, and rc ordering Ingo Franzki 2026-09-28 13:49:01 +02:00
• e1b16f4111 P11KMIP: Fix memory leak in kmip_encode_json() Ingo Franzki 2026-09-28 13:47:38 +02:00
• d6d5194712 P11KMIP: Fix hex representation of values >= 2^52 Ingo Franzki 2026-09-28 13:46:59 +02:00
• a59d96cf69 P11KMIP: Fix hostname verification with IPv6 addresses Ingo Franzki 2026-09-28 13:45:05 +02:00
• 7d0c7f126f P11KMIP: Structures must be a multiple of the TTLV block length Ingo Franzki 2026-09-28 13:44:14 +02:00
• 277e098409 P11KMIP: Fix attributes with wrong KMIP tag Ingo Franzki 2026-09-28 13:43:34 +02:00
• 345eec8904 P11KMIP: Load the system's default CA certs if no CA is specified Ingo Franzki 2026-09-28 08:21:20 +02:00
• b71487d962 P11KMIP: On any I/O failure tear down the connection completely Ingo Franzki 2026-09-28 08:20:35 +02:00
• 7758e6e595 P11KMIP: Fix NULL pointer dereference on corrupted KMIP response Ingo Franzki 2026-09-28 08:19:27 +02:00
• a3d297c30e TESTCASES: Don't set CKF_INTERFACE_FORK_SAFE to get interfaces Ingo Franzki 2026-09-25 09:03:02 +02:00
• 83086fb742 API: Don't advertise interfaces with CKF_INTERFACE_FORK_SAFE Ingo Franzki 2026-09-25 09:01:37 +02:00
• f58f72d548 PKCSSLOTD: Fix potentially unterminated string usage Ingo Franzki 2026-09-25 08:44:18 +02:00
• b1776832b6 PKCSICSF: Fix uninitialized variable Ingo Franzki 2026-09-25 08:30:45 +02:00
• 997f633894 ICSF: Fix uninitialized variable Ingo Franzki 2026-09-25 08:28:48 +02:00
• 612cb84e23 TESTCASES: Remove temporary files produced by pkcstok_migrate_test.sh Ingo Franzki 2026-09-23 15:27:20 +02:00
• e93833f433 P11SAK: Fix assignment discards ‘const’ qualifier warning Ingo Franzki 2026-09-23 13:14:36 +02:00
• b0769d6332 CI: Let ock_tests.sh only spawn a certain number of concurrent processes Ingo Franzki 2026-09-16 08:54:07 +02:00
• 943924e4e6 CI: Backup the existing opencryptoki.conf before overwriting Ingo Franzki 2026-09-15 13:49:32 +02:00
• a1d6b8c375 CI: Remove the CI tokens during 'make ci-cleanup' Ingo Franzki 2026-09-14 17:02:06 +02:00
• 71f197707e CI: Add an ICSF token using the ICSF mock server for 'make ci-installcheck' Ingo Franzki 2026-09-14 15:27:46 +02:00
• ab92734d72 TOOLS: Add a ICSF mock server that simulates ICSF for testing Ingo Franzki 2026-09-08 16:56:36 +02:00
• cb3c2e0a2c ICSF: Filter out CKA_EN/DECAPSULATE attributes, ICSF does not support them Ingo Franzki 2026-09-15 11:05:39 +02:00
• 22d88c2ea3 PKCSICSF: Allow to specify the SO PIN and RACF password as option Ingo Franzki 2026-09-14 16:07:55 +02:00
• 7f5c86a549 PKCSICSF: Allow to specify the slot number to create with '-a <token>' Ingo Franzki 2026-09-14 15:10:30 +02:00
• 0daecd52ed PKCSICSF: Store absolute paths in ICSF token config for SASL method Ingo Franzki 2026-09-14 14:52:17 +02:00
• 58d45b6ff1 ICSF: Support public session with SASL authentication Ingo Franzki 2026-09-14 13:52:43 +02:00
• 0d7bf34bee PKCSICSF: Update man page to document the SASL authentication setup steps Ingo Franzki 2026-09-14 13:23:54 +02:00
• f0df2b4023 TESTCASES: Skip object mgmt testcases for ICSF token Ingo Franzki 2026-09-14 10:05:17 +02:00
• 6d90d94500 TESTCASES: Adjust PKCS#11 testcases for ICSF token Ingo Franzki 2026-09-14 09:10:50 +02:00
• 2ba0a19469 TESTCASES: Adjust p11sak_test.sh for the ICSF token Ingo Franzki 2026-09-11 13:48:18 +02:00
• bc1fac364f ICSF: Allow NULL attrs if number of attrs is zero Ingo Franzki 2026-09-11 14:49:39 +02:00
• 81385b50ac ICSF: Restrict key wrapping with CKM_RSA_PKCS to secret keys Ingo Franzki 2026-09-11 11:23:22 +02:00
• b4b140a38c ICSF: Map CKR_DATA_LEN_RANGE to CKR_KEY_SIZE_RANGE in icsftok_wrap_key Ingo Franzki 2026-09-11 10:58:23 +02:00
• e7fc2734e9 ICSF: Convert compressed or raw EC points to uncompressed Ingo Franzki 2026-09-10 17:01:12 +02:00
• afb7209dd0 TESTCASE: Let run_DeriveECDHKeyKAT() continue with next vector on error Ingo Franzki 2026-09-10 13:17:59 +02:00
• 6d329a4549 TESTCASES: Skip unsupported curves and KDFs for the ICSF token Ingo Franzki 2026-09-09 15:25:25 +02:00
• 4941461449 ICSF: Support newer KDF values Ingo Franzki 2026-09-09 15:41:17 +02:00
• fa54378614 ICSF: Adjust return code mapping Ingo Franzki 2026-09-09 13:38:55 +02:00
• 9c05091d52 POLICY: Fix memory leak in policy_extract_key_data() for DH keys Ingo Franzki 2026-09-09 11:46:06 +02:00
• 6606505421 POLICY: Fix typo in trace message Ingo Franzki 2026-09-08 13:45:33 +02:00
• e3fbb74ece ICSF: Fix memory leak icsftok_find_objects_init Ingo Franzki 2026-09-08 13:16:19 +02:00
• ca7f1645a4 COMMON/EP11/ICSF: Make C_Login, C_Set/InitPIN, C_InitToken fully thread save Ingo Franzki 2026-09-08 09:41:02 +02:00
• 063621047a PKCSICSF: Add support for changing the RACF password Ingo Franzki 2026-09-07 15:56:41 +02:00
• bf40a5fe9f ICSF: Introduce a FIPS-compliant token data store format Ingo Franzki 2026-09-07 15:22:01 +02:00
• d3b97c59c3 TESTCASES: tok2tok: Skip if an EC key with an unsupported curve is generated Ingo Franzki 2026-09-11 08:55:25 +02:00
• 5ebc3e7c04 EP11: Edwards/Montgomery mechanisms are EP11 version dependent Ingo Franzki 2026-09-11 08:54:14 +02:00
• 430a47d747 CI: Allow to reuse an existing token setup for running ci-installcheck Ingo Franzki 2026-09-07 10:25:09 +02:00
• ce11cba0bb CI: Run tok2tok_transport on all slot combination in the CI Ingo Franzki 2026-09-02 14:54:43 +02:00
• 9681c3e6c7 MAN: Fix man page variable substitution Ingo Franzki 2026-09-08 09:01:09 +02:00
• 299ebae36b TESTCASES: Update ASN1 unit tests for common SPKI encoding function Ingo Franzki 2026-09-01 16:57:02 +02:00
• 784fcb1871 COMMON: Refactor the public key encoding functions Ingo Franzki 2026-09-01 16:56:30 +02:00
• 745c8068d8 COMMON: Add overflow checks for BER encoding functions Ingo Franzki 2026-09-01 14:29:45 +02:00
• 66de83dcc3 TESTCASES: Update ASN1 unit test for now rejected CHOICE option 0x1f Ingo Franzki 2026-09-01 15:31:00 +02:00
• 8cb0e36c2a COMMON: Refactor BER primitive encoding and decoding Ingo Franzki 2026-09-01 14:17:03 +02:00
• 90df45fe70 COMMON: Remove dependency on liblber in common code Ingo Franzki 2026-09-01 11:48:03 +02:00
• e9c93d708f P11KIMIP: Fix NULL pointer dereference in kmip_v2_attr_from_v1_attr() Ingo Franzki 2026-09-01 08:31:25 +02:00
• beeff7942c ICA: Remove CKF_HW from SHA3 and SHA512/224/SHA512/256 mechanisms Ingo Franzki 2026-08-31 16:18:56 +02:00
• 4f1e1de217 SOFT: Fix flags for CKM_DES3_MAC[_GENERAL] and CKM_AES_MAC[_GENERAL] Ingo Franzki 2026-08-31 16:11:50 +02:00
• bc35619cc0 ICA: Fix reported key sizes for CKM_DES_CFB8/CFB64/OFB64 Ingo Franzki 2026-08-31 16:07:48 +02:00
• 4bd4e4c9c1 P11SAK: Fix typos and copy&paste errors Ingo Franzki 2026-08-31 15:37:07 +02:00
• c89d951625 MAKEFILE: Misc update for ci-installcheck Ingo Franzki 2026-08-25 14:40:47 +02:00
• 83d8e3ce97 TESTCASES: Add a token migration test to 'make ci-installcheck' Ingo Franzki 2026-08-25 14:18:11 +02:00
• c87900ac8f CONFIGURE/MAKE: Fix configure script and make files Ingo Franzki 2026-08-24 14:00:23 +02:00
• 26c6ae629f PKCSTOK_ADMIN: Fix build error due to missing mechtable-gen.h Ingo Franzki 2026-08-24 13:31:25 +02:00
• 088be49d5f RPM: Updates and fixes Ingo Franzki 2026-08-24 11:36:39 +02:00
• f805c40269 SysV: Use full path of pkcsslotd executable Ingo Franzki 2026-08-24 11:26:33 +02:00