Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• eb40df29f2 EP11: HSM MK change: finalize/cancel the wrap blob Ingo Franzki 2022-07-28 10:55:33 +02:00
• ca272a09b8 EP11: HSM MK change: finalize session state blobs Ingo Franzki 2022-06-14 16:58:13 +02:00
• dc1fc641b4 EP11: HSM MK change: finalize/cancel key objects Ingo Franzki 2022-06-14 13:10:43 +02:00
• 79b1ab3ca1 EP11: HSM MK change: re-encipher the wrap blob Ingo Franzki 2022-07-28 10:51:42 +02:00
• 2a636a3321 EP11: HSM MK change: re-encipher session state blobs Ingo Franzki 2022-06-14 15:16:20 +02:00
• 592140b2c4 EP11: HSM MK change: re-encipher key objects Ingo Franzki 2022-06-13 15:39:27 +02:00
• 45c8cf416b EP11: Perform certain mechanisms always as single operation Ingo Franzki 2022-08-29 14:27:45 +02:00
• 795aba5d1f common: Helper function to iterate over active operations Ingo Franzki 2022-08-25 11:22:01 +02:00
• 563101aaba common: Helper function to iterate over token and session key objects Ingo Franzki 2022-08-25 10:20:28 +02:00
• 86da31b54e common: better error handling in object_mgr_save_token_object Ingo Franzki 2022-08-09 16:42:42 +02:00
• 5bac86fa41 common: Helper functions for re-enciphering secure key objects Ingo Franzki 2022-06-15 15:05:56 +02:00
• 3fb0ecb212 common: Allow object_mgr_check_shm() with WRITE locked objs Ingo Franzki 2022-06-15 15:04:19 +02:00
• dfac814f0f common: Add template_remove_attribute() function Ingo Franzki 2022-06-13 14:32:26 +02:00
• 20f3cafe5c common: Add attribute for re-encrypted and old secure key blob Ingo Franzki 2022-06-13 14:21:27 +02:00
• 31c7d109aa EP11: HSM MK change: retry logic if single APQN went offline Ingo Franzki 2022-06-10 11:42:29 +02:00
• 09f6775849 EP11: HSM MK change: handle MK change event: finalize/cancel query Ingo Franzki 2022-06-10 09:44:38 +02:00
• 854b18a73d EP11: HSM MK change: Re-encipher wrap blob if operation active Ingo Franzki 2022-06-09 16:57:16 +02:00
• d16a4983bd EP11: HSM MK change: Select single APQN when operation is active Ingo Franzki 2022-06-09 15:16:07 +02:00
• efa828fde0 EP11: HSM MK change: Allow new WK for new keys if operation active Ingo Franzki 2022-06-09 15:43:24 +02:00
• ab3678ab5a EP11: HSM MK change: Allow and check new WK if operation is active Ingo Franzki 2022-06-09 14:51:30 +02:00
• 487c9fc794 EP11: HSM MK change: Check for pending operations at token init Ingo Franzki 2022-06-09 13:53:15 +02:00
• 40be66da3b EP11: HSM MK change: handle MK change event: Initial query Ingo Franzki 2022-06-09 10:24:59 +02:00
• ab6a4119e0 CCA: Actively reject concurrent HSM master key changes Ingo Franzki 2022-06-07 14:16:00 +02:00
• 7d2bb834c4 API/EP11: Lock API functions against HSM MK change state changes Ingo Franzki 2022-06-13 13:36:05 +02:00
• 3c984b9ec1 pkcshsm_mk_change: Complete man page Ingo Franzki 2022-08-05 15:09:49 +02:00
• ab983f83b7 pkcshsm_mk_change: finalize and cancel command Ingo Franzki 2022-06-07 13:05:12 +02:00
• 5f5a6e0719 pkcshsm_mk_change: list command Ingo Franzki 2022-06-07 11:40:05 +02:00
• 7580902d2f pkcshsm_mk_change: reencipher command Ingo Franzki 2022-06-03 10:29:32 +02:00
• 72b05938d2 events: Add HSM master key change events Ingo Franzki 2022-06-07 09:26:18 +02:00
• 6d46d0c0f3 hsm_mk_change: Add utilities for managing MK change operations Ingo Franzki 2022-06-01 11:54:40 +02:00
• 4af4797c5a pkcshsm_mk_change: Add skeleton for the new pkcshsm_mk_change tool Ingo Franzki 2022-06-01 10:31:20 +02:00
• c0f034e45b EP11: fix description of PKEY_MODE option Joerg Schmidbauer 2023-03-13 13:30:57 +01:00
• 89f9ba6e5f ci: switch to CEX8 as latest crypto express adapter version Ingo Franzki 2023-02-23 13:47:58 +01:00
• dff76c17eb ICA: Fix private exponent calculation Ingo Franzki 2023-02-22 15:09:37 +01:00
• 9d7ea2ffcd CCA: Support EC public key import with compressed EC point Ingo Franzki 2023-02-21 11:19:43 +01:00
• c7594c4e8c EP11: Fix possible memory leak Ingo Franzki 2023-02-20 13:56:27 +01:00
• b9ae1f6efb ICA: Calculate private exponent when generating RSA keys Ingo Franzki 2023-02-20 10:06:38 +01:00
• df01fc2eed SOFT/ICA: Add min/max key sizes to HMAC mechanism info Ingo Franzki 2023-02-14 08:58:46 +01:00
• f43103e328 pkcsconf: Ignore CKR_TOKEN_NOT_PRESENT when displaying info Ingo Franzki 2023-02-13 13:42:48 +01:00
• fac284b5df Bumping up to version-3.20.0 v3.20.0 Ingo Franzki 2023-01-31 10:02:25 +01:00
• e07add9494 policy: Fix update of mechanism info for AES-XTS mechanisms Ingo Franzki 2023-02-09 10:54:17 +01:00
• fbb2c3966d Testcase: Fix testcase count in do_TestAttributesAESXTS function. Vishnudatha Kanjur 2023-02-08 11:00:35 +01:00
• 2c539be045 COMMON: Fix possible memory leak Ingo Franzki 2023-02-08 09:23:59 +01:00
• f3fc5ed1ff COMMON: Avoid double free in error case Ingo Franzki 2023-02-08 09:16:02 +01:00
• 621401b873 EP11: remove unused variable Ingo Franzki 2023-02-08 09:13:54 +01:00
• e222d7f1f0 ICSF: Fix memory leak with CKM_SSL3_MASTER_KEY_DERIVE Ingo Franzki 2023-02-07 09:23:07 +01:00
• 4560a3dee0 ICSF: Fix address sanitizer error for NULL input data case Ingo Franzki 2023-02-07 09:07:26 +01:00
• 81e9ae3e0e ICSF: Fix memory leak when retrieving attributes Ingo Franzki 2023-02-07 08:57:09 +01:00
• f079b066fc ICSF: Fix wrap/unwrap using a symmetric wrapping key Ingo Franzki 2023-02-06 15:22:25 +01:00
• af4a76c41c Fix compile error "error: initializer element is not constant" Ingo Franzki 2023-02-07 08:33:01 +01:00
• d81d638fc3 configure: Fix install location of tmpfiles.d config file Ingo Franzki 2023-02-06 09:50:21 +01:00
• 1927c6b6c1 TESTCASES: run AES pkey=1 tests only on EP11 token Ingo Franzki 2023-02-03 10:29:17 +01:00
• 0a2272dfce ICSF: Fix error handling for C_GetAttributeValue Ingo Franzki 2023-02-03 11:34:07 +01:00
• b08bea10d5 ICSF: Do not pass vendor defined attributes to ICSF Ingo Franzki 2023-02-03 10:57:02 +01:00
• 331407bbbf TESTCASES: Add tests for CKM_TLS_* mechanisms Ingo Franzki 2023-02-02 15:03:21 +01:00
• f647a0c5cd ICSF: Fix support of CKM_TLS_KEY_AND_MAC_DERIVE Ingo Franzki 2023-02-02 15:22:04 +01:00
• 1249ea91e6 ICSF: Add support for CKM_TLS_PRE_MASTER_KEY_GEN Ingo Franzki 2023-02-02 15:02:16 +01:00
• 4f9209622c ci: Fix genlatestep11cfg() function to add option to config file Ingo Franzki 2023-02-02 10:41:37 +01:00
• fafedd340f EP11: Check MKVP of both keys for AES-XTS key import Ingo Franzki 2023-02-01 17:14:57 +01:00
• 18e9e2cdf6 ci: adjust slot configuration to use protected key support Ingo Franzki 2023-01-31 14:11:41 +01:00
• 9f6db3fb33 ci: Match APQNs that contain hex digits, not only decimal Ingo Franzki 2023-01-31 13:42:09 +01:00
• 87c34e40ca configure: Only enable EP11 token if pkey kernel header is available Ingo Franzki 2023-01-31 10:41:49 +01:00
• 56e3267845 COMMON: Silence -Wmaybe-uninitialized warning Ingo Franzki 2023-01-31 10:22:55 +01:00
• 94dbc65412 EP11: Fix setup of CKA_CHECK_VALUE for C_GenerateKey Ingo Franzki 2023-01-18 09:09:26 +01:00
• 1121610b6a EP11: DH keygen: Supply CKA_VALUE_BITS to private key Ingo Franzki 2022-11-30 13:45:30 +01:00
• dbefe07603 SOFT: DH keygen: Support optional CKA_VALUE_BITS attribute Ingo Franzki 2022-11-30 11:43:40 +01:00
• 6068ac982c SOFT: Support DH keys up to 8192 bits prime size Ingo Franzki 2022-11-30 11:33:52 +01:00
• 7558abc24a EP11: Fix set attribute values function for Data or Certificate objects. Vishnudatha Kanjur 2023-01-31 10:25:28 +01:00
• be8f962a5f EP11: Fix potential memory leak in token_specific_set_attrs_for_new_object Vishnudatha Kanjur 2023-01-30 14:00:30 +01:00
• 97fd3eabfd EP11: Fix potential memory leak when importing symmetric key Vishnudatha Kanjur 2023-01-27 19:44:36 +01:00
• e8226833c5 EP11: C_IBM_ReencryptSingle update for AES XTS mechanism. Vishnudatha Kanjur 2023-01-27 19:13:41 +01:00
• d86bc96bae pkcsep11_migrate: Re-encrypt AES-XTS keys Ingo Franzki 2022-11-25 09:04:01 +01:00
• 48c708a2da EP11: Wrap, Unwrap and Derive keys for AES XTS keys. Vishnudatha Kanjur 2023-01-20 17:32:07 +01:00
• 6f05dc346a Common: Fix to enable AES CMAC with msa level 4 Vishnudatha Kanjur 2023-01-17 16:32:34 +01:00
• 5d45579c6d Common: Fix output data length in the AES XTS processing Vishnudatha Kanjur 2023-01-17 16:14:33 +01:00
• abce507a10 AES XTS: Testcase update for testing C_SetAttributeValue function. Vishnudatha Kanjur 2022-12-20 17:02:23 +01:00
• 1cb183d8b3 EP11 : C_SetAttributeValue function update for AES XTS Vishnudatha Kanjur 2022-12-16 17:46:08 +01:00
• 92720c8ef1 EP11: testcase changes for AES XTS mechanism. Vishnudatha Kanjur 2022-12-16 17:17:22 +01:00
• 9176ebf553 EP11: Report the AES-XTS mechanisms as supported in the mechanism list Vishnudatha Kanjur 2022-12-16 17:15:01 +01:00
• bf9d52393e EP11: Protected key changes to support AES XTS mechanism Vishnudatha Kanjur 2022-12-09 16:41:01 +01:00
• 6e17a64388 EP11: AES XTS Import Clear key Vishnudatha Kanjur 2022-12-09 15:49:57 +01:00
• d1128c4859 EP11: Add support for AES XTS key gen Vishnudatha Kanjur 2022-12-09 15:25:07 +01:00
• 45bc6dd09f EP11: Fix setting unknown CPs to ON Ingo Franzki 2023-01-25 13:21:44 +01:00
• 6b712623f5 travis: Install autoconf-archive package Ingo Franzki 2023-01-24 14:47:08 +01:00
• 282ec08f93 README: Fix typo in note about cross compiler build Ingo Franzki 2023-01-24 14:46:27 +01:00
• 214d6076b5 EP11: Supply CKA_PUBLIC_KEY_INFO with CKM_IBM_BTC_DERIVE of private key Ingo Franzki 2022-11-04 11:33:50 +01:00
• c3f3bb3bc1 testcase: Enhance p11sak testcase to generate IBM Kyber keys Ingo Franzki 2022-11-09 09:45:21 +01:00
• 518587c38b p11sak: Add support for IBM Kyber key type Ingo Franzki 2022-11-08 17:03:11 +01:00
• c55c7047ad p11sak: Support additional Dilithium variants Ingo Franzki 2022-11-08 16:46:26 +01:00
• 064195093f TESTCASES: Add tests for CKM_IBM_KYBER Ingo Franzki 2022-03-01 13:10:51 +01:00
• 6b933ba425 POLICY/STATISTICS: Check for Kyber KEM KDFs and count KDF digest usage Ingo Franzki 2022-03-02 16:44:27 +01:00
• 0caff44cd5 EP11: Add support for encrypt/decrypt and KEM operations with Kyber Ingo Franzki 2022-03-01 16:55:01 +01:00
• b85e6c15a1 EP11: Add support for generating and importing Kyber keys Ingo Franzki 2022-03-01 11:09:26 +01:00
• c14d85b2b5 COMMON/EP11: Add Kyber key type and mechanism Ingo Franzki 2022-03-01 09:15:15 +01:00
• f2519d1416 TESTCASES: Test Dilithium variants Ingo Franzki 2022-02-18 14:25:16 +01:00
• 26fe51d922 POLICY: Dilithium strength and signature size depends on variant Ingo Franzki 2022-02-18 12:58:24 +01:00
• 9ef2efc904 EP11: Query supported PQC variants and restrict usage Ingo Franzki 2022-02-17 17:04:11 +01:00
• af9ccf352d COMMON/EP11: Allow to select Dilithium variant via mode or key form attribute Ingo Franzki 2022-02-17 10:27:56 +01:00
• b3ba153937 COMMON/EP11: Add CKA_VALUE holding SPKI/PKCS#8 of key for Dilithium keys Ingo Franzki 2022-02-16 16:20:41 +01:00
• 359a559349 COMMON: Dilithium key BER encoding/decoding allow different OIDs Ingo Franzki 2022-02-16 13:04:24 +01:00