Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 0243d13625 headers: Set up platform-specific headers Akash Kulhalli 2024-02-19 15:38:27 +05:30
• a402a405fa aix: Add missing code that is AIX-specific Akash Kulhalli 2024-02-19 15:21:26 +05:30
• d1785b5e54 testcases: miscellaneous updates Akash Kulhalli 2024-02-19 15:02:22 +05:30
• c8a1f1a630 man: Configure man page only if corresponding feature is enabled Akash Kulhalli 2024-02-19 12:35:04 +05:30
• 2d88581892 configure: Add AIX as a recognised platform Akash Kulhalli 2024-02-19 11:44:07 +05:30
• 01db3ce27e makefile: Add AIX as a supported platform Akash Kulhalli 2024-02-19 10:40:06 +05:30
• b8b48ce391 COMMON: Support key wrapping of IBM Dilithium and IBM Kyber keys Ingo Franzki 2024-04-19 10:41:30 +02:00
• cd6e763336 COMMON: Allow secure key import of PQC keys via CKA_IBM_OPAQUE Ingo Franzki 2024-04-03 08:36:25 +02:00
• f8ad4f0395 COMMON: Make private key components of Dilithium and Kyber keys sensitive Ingo Franzki 2024-04-17 14:41:29 +02:00
• 68c380ed6f P11SAK: Fix IBM Dilithium variant name Ingo Franzki 2024-04-19 09:38:35 +02:00
• cee77b70bb P11SAK: Also display CKA_VALUE of IBM Dilithium and Kyber keys Ingo Franzki 2024-04-03 10:13:38 +02:00
• 6b03df491f P11SAK: Fix off by one in ber_encode_len Ingo Franzki 2024-04-15 10:33:38 +02:00
• cf74f5d5b7 P11SAK: Fix NULL dereference issue Ingo Franzki 2024-04-15 10:27:45 +02:00
• 3b5df0246c ICA: Check return code from ica_aes_gcm_kma_update() Ingo Franzki 2024-04-15 10:36:25 +02:00
• 096c873f8d ICA: Use new GCM API only if ica_api.h defines AES_GCM_KMA Ingo Franzki 2024-04-15 09:42:57 +02:00
• 38d572ad0a EP11: Fix compile error with NO_PKEY defined Ingo Franzki 2024-04-15 09:31:12 +02:00
• 7ceed063d4 COMMON: simplify logic in gcm_final routines Joerg Schmidbauer 2024-04-11 10:03:13 +02:00
• 8427f3ba33 COMMON: add output buffer length check for gcm Joerg Schmidbauer 2024-04-11 09:58:54 +02:00
• 102f3727a6 ICA: consolidate glue code in update routines Joerg Schmidbauer 2024-03-14 13:03:08 +01:00
• d374bf9fd2 ICA: support libica new gcm api Joerg Schmidbauer 2024-03-13 12:59:51 +01:00
• ac4d1a3e44 ICA: print return codes from libica in decimal Joerg Schmidbauer 2024-03-13 13:03:20 +01:00
• 0bc14c8352 ICA: correct wording in trace msg Joerg Schmidbauer 2024-03-13 13:05:50 +01:00
• 3db3d7d5bc ICA: correct typo in comment Joerg Schmidbauer 2024-03-13 13:04:04 +01:00
• 87ce172044 TESTCASES: Add p11sak tests for exporting keys or certificates as URI-PEM file Ingo Franzki 2024-04-12 11:08:01 +02:00
• e86bd4dab9 P11SAK: Add support for exporting a key or certificate as URI-PEM file Ingo Franzki 2024-04-05 11:27:10 +02:00
• 5997188d5e URI: Add support for pin-value and pin-source in PKCS#11 URI Ingo Franzki 2024-04-05 11:14:57 +02:00
• ab7c09085f p11sak: Don't copy an empty CKA_ID with extract-pubkey Ingo Franzki 2024-04-02 08:49:59 +02:00
• 4b6e534135 TESTCASES: Enable AES and EC tests for combined extract Joerg Schmidbauer 2024-03-20 11:10:27 +01:00
• cf978b1112 EP11: Reject combined extract attribute settings if it is not supported Ingo Franzki 2024-03-20 08:44:25 +01:00
• b9f6848699 CCA: Simplify check_cca_ec_type_and_add_params() function Ingo Franzki 2024-03-15 08:47:35 +01:00
• 2c8692d77d p11sak: Don't copy an empty CKA_ID with extract-cert-pubkey Ingo Franzki 2024-03-15 08:31:37 +01:00
• dcf2d5b942 p11sak: Fix segfault with --id "" Ingo Franzki 2024-03-15 08:30:03 +01:00
• e2be6643fe CCA: Support import of key blob for private EC key with Koblitz curve secp256k1 Ingo Franzki 2024-03-14 13:13:58 +01:00
• 2ef949c104 COMMON: Don't clear context_len before calling context_free_func Ingo Franzki 2024-03-13 14:53:17 +01:00
• b74736d144 EP11: remove comment in German language Joerg Schmidbauer 2024-03-13 09:21:27 +01:00
• 99d8f89ec3 EP11: add missing newline in trace msg Joerg Schmidbauer 2024-03-12 17:31:53 +01:00
• 5b0ba05fd2 EP11: consider combined-extract for XTS pkey check Joerg Schmidbauer 2024-03-12 17:30:36 +01:00
• 960182e976 EP11: add check if protected-key support available at all Joerg Schmidbauer 2024-03-12 17:13:33 +01:00
• 80cab221a2 EP11: bugfix: correct lib version check Joerg Schmidbauer 2024-03-12 17:08:11 +01:00
• 92a1ec0d58 TESTCASES: Enable curve secp256k1 test for the CCA token Ingo Franzki 2024-03-06 09:02:18 +01:00
• 315745a522 CCA: Add support for EC curve secp256k1 Ingo Franzki 2024-03-06 09:00:35 +01:00
• 6971cdd669 EP11: XCP_MFL_PROBE flag no longer needed for host libs > 4.0 Joerg Schmidbauer 2024-03-04 17:08:23 +01:00
• 708cc559a3 EP11 pkey option: consolidate code parts, no logic change Joerg Schmidbauer 2024-03-07 17:51:40 +01:00
• 96807d9ff6 EP11 pkey option: add NO_PKEY compile option for EP11 token Joerg Schmidbauer 2024-02-21 13:48:15 +01:00
• 20e172c3f4 EP11 pkey option: handle new PKEY_MODE parms in eligibility check Joerg Schmidbauer 2024-03-07 17:42:11 +01:00
• e431acc270 EP11 pkey option: handle new PKEY_MODE parms for new objects Joerg Schmidbauer 2024-02-13 16:35:53 +01:00
• 0d304f55fa EP11 pkey option: add new PKEY_MODE parms to ep11 config file Joerg Schmidbauer 2024-02-13 16:20:06 +01:00
• 8401b57eed COMMON: Fix implicit rejection for RSA keys with empty CKA_PRIVATE_EXPONENT Ingo Franzki 2024-02-09 14:07:34 +01:00
• 5836e3cc48 ICA: Fix length check for ICA ex-data Ingo Franzki 2024-02-12 08:56:55 +01:00
• e6fc3c4a13 ICSF: Add support for SHA-2 mechanisms Ingo Franzki 2024-02-06 14:31:51 +01:00
• a66bbe3210 ICSF: Optimize C_GetAttributeValue by using cached result Ingo Franzki 2024-02-08 17:55:22 +01:00
• e5d7972f5a ICSF: Fix attribute retrieval handling Ingo Franzki 2024-02-08 08:58:33 +01:00
• 598a989e7a ICSF: Cache attributes for policy attribute retrieval Ingo Franzki 2024-02-07 16:29:46 +01:00
• 6acc08b6e7 policy: Also pass private callback data to free_attr callback function Ingo Franzki 2024-02-07 13:40:53 +01:00
• c68923e927 policy: Fix a use-after-free during retrieval of EC curve information Ingo Franzki 2024-02-08 11:41:12 +01:00
• 4da6d9db8a pin_prompt: Fix use of uninitialized storage Ingo Franzki 2024-02-09 09:23:37 +01:00
• da57285869 pin_prompt: Fix heap-buffer-overflow if pin_prompt() returns NULL Ingo Franzki 2024-02-09 09:20:10 +01:00
• 32ab06ccec Bumping up to version-3.23 v3.23.0 Ingo Franzki 2024-01-23 15:44:09 +01:00
• c8d264b1a8 COMMON: Register an atexit-handler to perform cleanup (aka C_Finalize()) Ingo Franzki 2023-12-05 10:56:25 +01:00
• 293dcf11ae EP11: Fix missing blank in trace output Ingo Franzki 2023-12-05 11:34:58 +01:00
• 890e6b29c5 EP11: Store list of adapter serial numbers in EP11 session HW feature object Ingo Franzki 2023-09-07 16:39:13 +02:00
• 75128fa960 EP11: Implement login and logoff of FIPS sessions Ingo Franzki 2023-09-01 14:45:34 +02:00
• d11a84883d EP11: Implement the LoginExtended protocol Ingo Franzki 2023-09-04 15:06:04 +02:00
• a5ad7f5bb9 EP11: Obtain FIPS pin if FIPS-session mode is active Ingo Franzki 2023-09-01 09:37:19 +02:00
• 3fa51cf3e0 pkcsep11_session: Add fipspin command to set the FIPS pin Ingo Franzki 2023-09-01 09:32:30 +02:00
• dee8d280bc pkcsep11_session: Refactor to avoid duplicate definitions Ingo Franzki 2023-09-01 11:35:11 +02:00
• 9161d9b85d EP11: Check if APQN for FIPS session related control points Ingo Franzki 2023-08-31 17:19:33 +02:00
• ee7bfa9e01 EP11: Check if APQN supports Login algorithm and P521 importer key type Ingo Franzki 2023-08-31 15:55:50 +02:00
• 09f796ce68 EP11: Check if APQN supports Login/LogoutExtened in FIPS-session mode Ingo Franzki 2023-08-31 11:06:57 +02:00
• d027b6293a EP11: Get m_LoginExtended/m_LogoutExtended functions from host library Ingo Franzki 2023-08-30 17:07:29 +02:00
• 8ca5b4b49d EP11: Lazy obtaining of the firmware master key verification pattern Ingo Franzki 2023-09-04 11:39:56 +02:00
• e1e23f6328 EP11: Lazy creation of wrap-blob for importing clear keys Ingo Franzki 2023-08-30 13:35:18 +02:00
• cde99f5274 EP11: Require USER session to access key objects in FIPS-session mode Ingo Franzki 2023-08-30 16:50:25 +02:00
• 9ce9b913db EP11: Introduce FIPS_SESSION_MODE config option Ingo Franzki 2023-08-30 16:35:55 +02:00
• 9120b1a99d EP11: Refactor VHSM mode handling Ingo Franzki 2023-08-29 10:28:30 +02:00
• e8850bc138 COMMON: Add support for a global token specific counter in pkcsslotd's shm Ingo Franzki 2023-08-29 14:13:19 +02:00
• da885f213c COMMON: Allow a token to check for object access on creation and use Ingo Franzki 2023-08-22 10:46:42 +02:00
• 39032f0cdb EP11: Also check WKVP of MACed SPKIs Ingo Franzki 2023-08-16 10:51:38 +02:00
• db53bfef1e EP11: Public objects can't be bound to an EP11 session Ingo Franzki 2023-07-20 17:43:13 +02:00
• 2f5dfc674b EP11: Key creation may return CKR_PIN_INCORRECT if session is not logged in Ingo Franzki 2023-09-27 10:52:39 +02:00
• eb21c1cb31 EP11: Control point updates Ingo Franzki 2023-08-30 15:18:20 +02:00
• 4227385013 EP11: Update EP11 header files to host library 4.1 Ingo Franzki 2023-08-30 14:55:41 +02:00
• 1eeab07049 common: Fix compile error/warning when compiled with GCC 14 Ingo Franzki 2024-01-29 08:35:02 +01:00
• 6173220c1a EP11: Support ECDH with compressed or hybrid EC point as public data Ingo Franzki 2024-01-26 14:17:49 +01:00
• 7caefd5ec6 TESTCASES: ec_tests: Support ECDH KATs for secure key tokens Ingo Franzki 2024-01-26 09:24:36 +01:00
• 29444efbc3 TESTCASES: ec_tests: Don't try to compare derived keys for secure key tokens Ingo Franzki 2023-12-11 13:22:00 +01:00
• 38fe35ebbb COMMON: mech_dh: Correct mode when creating the key object for DH derive Ingo Franzki 2023-12-11 14:41:53 +01:00
• b833f2f90f testcases: Add RSA implicit rejection test cases Ingo Franzki 2024-01-16 10:01:20 +01:00
• c26e049bf4 common: Add support for implicit rejection for RSA PKCS#1 v1.5 de-padding Ingo Franzki 2024-01-15 12:53:37 +01:00
• 7ffc0e135b Constant time fixes for C_Decrypt return code handling Ingo Franzki 2024-01-12 09:36:27 +01:00
• bae58c2f30 Fixes for protecting buffers containing sensitive data Ingo Franzki 2024-01-16 11:42:15 +01:00
• f06fd4fcda TESTCASE: Correct test run counting for the events test case Ingo Franzki 2024-01-09 16:25:16 +01:00
• 2ea019ee2b COMMON: Update rsa_parse_block_type_2() to not leak the message length Ingo Franzki 2023-12-12 17:16:56 +01:00
• 7fc0dacd26 ICA: Enable external AES-GCM IV when libica is in FIPS mode Ingo Franzki 2024-01-08 11:17:55 +01:00
• 4099dac8c6 TESTCASE: Correct test run counting for some test cases Ingo Franzki 2023-12-15 08:32:59 +01:00
• 239fefc703 CCA: Set CKA_SENSITIVE defaults dependent on FORCE_SENSITIVE option Ingo Franzki 2023-12-06 13:51:29 +01:00
• 123024be46 EP11: Set CKA_SENSITIVE defaults dependent on FORCE_SENSITIVE option Ingo Franzki 2023-12-06 13:40:02 +01:00
• 94bbfcd7b1 EP11: Set CKA_ALWAYS_SENSITIVE and CKA_NEVER_EXTRACTABLE correctly at keygen Ingo Franzki 2023-12-06 11:18:09 +01:00
• ef335d2020 CCA: All numeric fields in CCA key tokens and verb-data are big endian Ingo Franzki 2023-12-04 10:49:25 +01:00
• 0d0f6de75e API: Special handling for recursive calls of C_Initialize Ingo Franzki 2023-11-08 10:27:30 +01:00