Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 32330375cb Removed duplicate AES_GCM entry in ica token Signed-off-by: Ingo Tuchscherer <ingo.tuchscherer@linux.vnet.ibm.com> Ingo Tuchscherer 2016-01-06 13:10:56 -05:00
• 8936e0e79c Fix testcase failure on CCA and EP11 token Signed-off-by: Harald Freudenberger <freude@linux.vnet.ibm.com> Signed-off-by: Vineetha Pai <vpishar@us.ibm.com> Harald Freudenberger 2016-01-05 17:08:36 -05:00
• 1b8a894603 Fix failure of the EP11 token on tok_des testcase Signed-off-by: Harald Freudenberger <freude@linux.vnet.ibm.com> Harald Freudenberger 2015-12-18 15:49:28 -05:00
• 2529cc2b5b Bumping up to version-3.4.1 with some fixes Signed-off-by: Vineetha Pai <vpishar@us.ibm.com> v3.4.1 Vineetha Pai 2015-12-04 16:52:47 -05:00
• 2bc59c8d8b Fix copyobjects test for cca and ep11 token by checking CKA_VALUE to be zero Joy Latten 2015-12-04 16:24:42 -05:00
• 43f546af9f Fix buffer overflow in cca token function ccatok_hmac() Harald Freudenberger 2015-12-04 15:59:32 -05:00
• abd071a1a5 fix for opencryptoki 3.4 build error on s390 31 bit build Harald Freudenberger 2015-12-03 17:02:04 -05:00
• 5f09c00031 Updated ChangeLog and bumped up opencryptoki version. v3.4 Joy Latten 2015-11-16 15:36:04 -06:00
• b30c067293 - Update testcases/pkcs11/README - do not re-init icsf token in gen_purpose testcases Joy Latten 2015-11-13 16:09:53 -06:00
• ee0ba361e0 icsftok_close_session does not require ldap handle, so should not check for it and error out in start of function. Joy Latten 2015-11-13 16:02:49 -06:00
• c707cfe94f Include assertion count in attribute testcase. Joy Latten 2015-11-13 12:51:01 -06:00
• 75edf7a2d5 Minor testcase correcttions. Joy Latten 2015-11-12 20:27:02 -06:00
• 70fe0b8df4 Currently the icsf token does not support C_GetObjectSize. Return appropriate error code. Joy Latten 2015-11-12 00:22:39 -06:00
• fd251182b5 MD5 HMAC mechanism was not being found. Joy Latten 2015-11-12 00:16:13 -06:00
• 2acb82196d Add additional sha hmac test vectors from the fips test vectors. Joy Latten 2015-11-11 23:22:59 -06:00
• f3d1122d60 Re-factor and rename misc_func.c and its testcases. Ian Davis 2015-10-18 19:46:34 -05:00
• 4eccf58124 C_Finalize should be called in the testcases. Ian Davis 2015-10-13 14:02:06 -05:00
• 7974e13f95 template.c is difficult to read because of format style and indentations. Correctly format indentations in template.c Joy Latten 2015-10-13 11:50:00 -05:00
• 1c7dc4bf97 Coverity Scan cleanup 1.In function dp_x9dh_set_default_attributes, subprimebits_attr is not used. It needs to be added to template via template_update_attribute(). 2. In kea_priv_set_default_attributes(), type_attr is not freed upon error. 3. In C_OpenSession, apiSessp is not freed upon error. 4. In key_mgr_wrap_key(), ctx is not freed upon error. 5. In template_unflatten_withSize(), a2 and tmpl are not freed upon error. Jakub Jelen 2015-10-12 12:15:00 -05:00
• 4d01202de9 get_srk_info in tpm token is not freeing secret before exiting on error. Jakub Jelen 2015-10-12 11:37:30 -05:00
• 98b548f812 Add CKA_MODULUS and CKA_PUBLIC_EXPONENT to the RSA private key template after generating to comply with pkcs#11v2.20. Ingo Tuchscherer 2015-10-11 18:50:50 -05:00
• aa7fb5448a CCA keys are wrapped with a master key, when this master key is changed, the wrapped keys need to be unwrapped with the old mater key and wrapped with the new master key. This patch extends the pkcscca tool to migrate wrapped keys. Fionnuala Gunter 2015-10-11 18:31:52 -05:00
• a9bb63162f ica_3des_* calls produce compiler warning when linked to newer version of libica. Correct warnings. Joy Latten 2015-10-09 17:51:24 -05:00
• f87eb9572e add AES GCM published test vectors Ingo Tuchscherer 2015-10-09 17:50:40 -05:00
• 7cad7ad680 Add aes gcm to the ica token. Ingo Tuchscherer 2015-10-09 17:49:56 -05:00
• ba4f228de1 Add GCM support to opencryptoki base infrastructure. Ingo Tuchscherer 2015-10-09 17:47:57 -05:00
• 248be0ddce [PATCH 4]: icsf ldap handle - The sign and verify functions in icsf token were not calling free_sv_ctx. sign_mgr_cleanup and verify_mgr_cleanup will eventually get called and free ctx->context. But in icsf token, we malloc ctx->context AND ctx->context->data. So, we should call free_sv_ctx first to ensure we free all data malloc'd specifically for icsf token. Joy Latten 2015-10-01 17:39:42 -05:00
• 185a6862d2 [PATCH 3]: icsf ldap handle - Add a check for the LDAP handle before using it. Also get_session_state() should return same error for all calls to it. Joy Latten 2015-10-01 17:38:06 -05:00
• e85af1658b [PATCH 2]: icsf ldap handle - closeallsessions needs to also close all the ldap handles. Joy Latten 2015-10-01 17:36:03 -05:00
• 5df0e5303a PATCH 1]: icsf ldap handle - Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. Joy Latten 2015-10-01 17:34:17 -05:00
• 4176f2ffa4 CKA_EC_POINT is not required in the ECDSA private key attribute, instead, CKA_VALUE is when importing a ECDSA private key. Vineetha Pai 2015-09-29 11:27:23 -05:00
• 98aa8d59b4 Add testcase for C_GenerateKeyPair, generating RSA key pair and checking for generation with required attributes. Joy Latten 2015-09-11 14:26:56 -05:00
• 913d80b6c1 Section 12.1.4 of pkcs#11v2.2 points out that the CKA_PUBLIC_EXPONENT may be omitted from template and if so, the mechanism should supply the public exponent attribute using the default value of 0x10001 (65537). Made corrections to do this. Joy Latten 2015-09-11 13:02:14 -05:00
• 5c1afc61d6 ep11 token incorrectly copied the public key object class to the private key, thus both public and private keys were CKO_PUBLIC_KEY. Remove this code. The default attribute functions will ensure that private key has correct info. Vineetha Pai 2015-09-10 23:57:37 -05:00
• 7748835d8f - Correct or remove some of the RSA generic secret key test vectors. These incorrect test vectors consisted of key lengths that the tokens could not use for genertaing these types of keys. - Correct testcase: Set the wrapped key to NULL for the next loop. Joy Latten 2015-09-08 09:29:14 -05:00
• da5a3e1775 Add ability to generate generic secret key in ica token. Vineetha Pai 2015-09-01 17:48:44 -05:00
• f68dd6f452 Add generic secret key generation mechanism to icsf token. Vineetha Pai 2015-09-01 17:28:57 -05:00
• 214414111c Correct the attribute defaults for generic secret keys. Vineetha Pai 2015-09-01 17:26:53 -05:00
• b797c7463c Add generic secret key generation to soft token. Vineetha Pai 2015-09-01 15:47:32 -05:00
• 07b32cda6e Add CKA_SHA512_HMAC to cca token's single hmac. It was left out. Check for NULL when creating an openssl context in soft token. Joy Latten 2015-08-31 18:02:17 -05:00
• b8c24b92a8 Add support to generate generic secret keys in cca token. Vineetha Pai 2015-08-31 17:04:46 -05:00
• 337f695367 Improved sess_mgmt testcase. Added check to ensure if mechanism under test is supported. Ingo Tuchscherer 2015-08-31 13:36:49 -05:00
• f4c69d85a3 Corrected slot number output in misc testcase Ingo Tuchscherer 2015-08-31 13:18:38 -05:00
• 2668e8f347 Rework of the EP11 token code to store only the real size of the blob into the IBM_OPAQUE attribute. Together with this change some code could be removed as it was for bringup purpose only. Harald Freudenberger 2015-08-31 12:47:27 -05:00
• 518871ce30 Pure whitespace cleanup in ep11 token specific code. Harald Freudenberger 2015-08-28 13:25:14 -05:00
• eccd3fd88c Fixes and improvements on misc testcases. obj_mgmt.c now uses a 'real' RSA key and not just 123. speed.c checks for CCA token and skips ECB if CCA. tok_des.c compiler warning fixed. misc_func.c smarter random test and now uses AES instead of DES. sess_perf.c now uses AES instead of DES. Harald Freudenberger 2015-08-26 18:39:57 -05:00
• c5a4771382 Fix missing newlines in trace statements in cca token. Harald Freudenberger 2015-08-26 17:13:20 -05:00
• 2150f290d6 Clear out VALUE attribute after import, and fix UNKNOWN trace statements. Harald Freudenberger 2015-08-26 16:54:35 -05:00
• a3553f8d64 Cleanup the value template after key import into cca token. Harald Freudenberger 2015-08-26 16:42:35 -05:00
• d91cbb4bea Removed securekey option from DES and AES testcases as there is now the required key import available. Fixed some compile warnings. Unified all testcases to print out a summary line and not just something like 'looks ok'. Fixed digest test to have a look onto the required key sizes for the cca token. Harald Freudenberger 2015-08-26 16:28:42 -05:00
• 446523364d ICSF token aborted when running hmac update with zero-length chunks. Needed to correct the ber-encoding in icsf_hmac_sign and verify to accept zero-lenth data. Joy Latten 2015-08-24 12:55:43 -05:00
• 4808a384e9 Add published fips cavp hmac test vectors. Joy Latten 2015-08-24 12:55:01 -05:00
• 016427c413 Add hmac support to soft token by calling openssl to do sha hmacs. Joy Latten 2015-08-24 12:54:16 -05:00
• 50d09bdf77 Add hmac support to cca token by calling CCA verbs to do sha hmacs. Joy Latten 2015-08-24 12:53:33 -05:00
• e4294ac4bd Add token specific hmac hooks to ock and tokens. Joy Latten 2015-08-24 12:52:46 -05:00
• fa7d22cc93 compute_sha() needs to accomodate newly aggregated sha method. Joy Latten 2015-08-24 12:51:59 -05:00
• 0e24406762 Aggregate the SHA token specific hooks in opencryptoki and in the tokens. Joy Latten 2015-08-24 12:51:14 -05:00
• a585aabe65 CCA token: Add HMAC key import code. Harald Freudenberger 2015-07-14 10:35:17 -05:00
• f5bad5f2af CCA token: add code to handle AES/DES key import. Harald Freudenberger 2015-07-10 14:58:52 -05:00
• fd54b4b3d3 CCA token: code cleanup whitespaces and rework trace statements. Harald Freudenberger 2015-07-02 13:02:10 +00:00
• 594702a3a8 Add header file to remove warning for pkcsep11_migrate utility. Joy Latten 2015-06-29 17:25:14 -05:00
• 3a8dc37ec0 Remove references to LEEDs. It is no longer supported. Joy Latten 2015-06-29 17:12:02 -05:00
• b212e44cf4 Fix all key mallocs to initialize key memory with zeros. Harald Freudenberger 2015-06-29 16:20:41 -05:00
• 1b5b6bd2ff Remove inline declaration for function in btree.c The functions are not required to be inline. Jakub Jelen 2015-06-29 12:39:13 -05:00
• 8fd44f641f Add missing lber library and include file to icsf. Jakub Jelen 2015-06-26 15:37:03 -05:00
• 33246d3b3c Add missing header files. Jakub Jelen 2015-06-26 15:34:56 -05:00
• 671f82d41f - Move get_ecsiglen to mech_ec, since this is the only place where it is used - Reorganize structures in ec_defs header files to avoid symbol redefinition Jakub Jelen 2015-06-26 15:28:35 -05:00
• e89326ee4c Add missing sources to add missing symbols. Jakub Jelen 2015-06-26 15:25:49 -05:00
• 6ff6301343 Fix compiler warnings in tpm token. Joy Latten 2015-06-26 12:26:38 -05:00
• 96bfa60c3f Fix compiler warnings in pkcsconf. Vineetha Pai 2015-06-26 15:09:47 -05:00
• 98a9109b9e Fix compiler warnings for pkcsslotd. Vineetha Pai 2015-06-26 15:07:51 -05:00
• c8fb708232 Fix compiler warnings in ica token. Joy Latten 2015-06-26 13:56:34 -05:00
• 3374af0704 Fix compiler warnings and errors for ep11 token. Joy Latten 2015-06-26 13:54:57 -05:00
• f9d88d4267 Cleanup compiler warnings in icsf token and pkcsicsf tool. Joy Latten 2015-06-26 12:17:53 -05:00
• 1c05d33ba9 Fix compiler warnings in soft token. Joy Latten 2015-06-26 13:52:56 -05:00
• 296ab72a9f Fix compiler warnings in cca token and pkcscca tool. Vineetha Pai 2015-06-26 12:12:53 -05:00
• 06fbff5de8 Fix compiler warnings and errors in the common directory. Vineetha Pai 2015-06-26 12:11:17 -05:00
• 4619770fe0 Compile opencryptoki with -Wall enabled. 1. Add -Wall to configure.in 2. Add missing prototypes to header files. 3. Fix compiler warning in api directory. Vineetha Pai 2015-06-26 12:08:41 -05:00
• 725214b4e9 Tracing and syslog improvements in cca and ep11 token code. Harald Freudenberger 2015-06-26 11:47:50 -05:00
• 7743c0b0c6 Update files for version 3.3 information. v3.3 Joy Latten 2015-04-17 11:40:06 -05:00
• 5e8b07b256 Correct a few trace calls. Joy Latten 2015-04-03 12:30:47 -05:00
• 38f596769e Replace deprecated des_ methods and types Bernard Spil 2015-04-17 12:12:29 -05:00
• 02fc777bab Swap TRACE_DEVEL and TRACE_DEBUG. Let TRACE_DEVEL refer to trace output that can be use by opencryptoki apps developers. Let TRACE_DEBUG be specifically for developers of the opencryptoki library. Joy Latten 2015-04-01 17:55:16 -05:00
• f1ea6b2ec1 The ssl3 testcase to derive multiple keys should use an AES key rather than a Generic Secret key. Also set export to FALSE. Joy Latten 2015-03-31 18:19:24 -05:00
• 956bd53b2f Allow root to run all the pkcs11 commands without needing to be in pkcs11 group. This was fixed previsously in commit 2475aaee11, but was mistakenly removed by a subsequent commit. Joy Latten 2015-03-31 17:40:56 -05:00
• 3311107e50 Remove unnecessary hooks. Joy Latten 2015-03-25 17:18:53 -05:00
• 0e1a98e967 Create new_host.c for ep11 token so it can call its own routines. Joy Latten 2015-03-25 17:15:14 -05:00
• 72a1ac0ae9 ICSF Token: chain data was not being copied for hmac signing and verifying. Joy Latten 2015-03-25 17:12:14 -05:00
• 33a2a0c8f0 Create a new_host.c for icsf token. Joy Latten 2015-03-25 17:10:14 -05:00
• 41ac38e759 Remove slot2local. It does not do anything. Joy Latten 2015-03-25 17:02:39 -05:00
• f93b49eccb Move some of the non-api routines out of new_host.c Joy Latten 2015-03-25 16:51:03 -05:00
• beaaf2e673 Cleanup new_host.c Joy Latten 2015-03-25 16:48:16 -05:00
• 5456b047b0 In C_DeriveKey do not check for NULL for location of derived key. It is ok if this value is NULL when deriving multiple keys. Joy Latten 2015-03-25 16:10:13 -05:00
• a2d60d856f In rsa pss mfg1, the check to see if a length is < 2^32 causes overflow on 32-bit systems. Remove this check since it can be debated this check is done implicitly in the data type. Joy Latten 2015-03-31 11:46:19 -05:00
• 11c0fc68b8 EP11 token rework based on the new OCK tracing interface, also some very small whitespace changes and solved some compiler warnings (unused variables, format string warnings). Harald Freudenberger 2015-03-11 16:34:25 -05:00
• 10c8ac2a4b testcase correction: In the AES wrap/unwrap testcase, the AES keys passed to be wrapped act as the AES data and therefore must be a multiple of the aes blocksize. Joy Latten 2015-02-03 13:56:39 -06:00
• d254406ec7 Make VALID_MECH a function. Joy Latten 2015-02-03 13:53:25 -06:00
• 1d3d226c0c In SC_DeriveKey check for the pointer to the derived key. Joy Latten 2015-02-03 13:51:51 -06:00
• e523a61d02 Remove DEBUG definitions in several header files. All DEBUG definitions should probably be in trace.h now. Remove msg.h and log.c file since no longer needed. Joy Latten 2015-02-03 13:49:30 -06:00
• ae29472ae1 Replace OCK_LOG with TRACE in ep11 token. Joy Latten 2015-02-03 13:46:26 -06:00