Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 11e808223f The asm/zcrypt.h header file uses some std int types and so the stdint.h include statement should occur before the zcrypt header file. Harald Freudenberger 2014-04-14 12:02:48 -05:00
• 2bca1b3922 Configure was checking for the ep11 lib and the m_init() function. As this library will be dynamically loaded at run time and there is no dependency at build time (but build will break if ep11 lib is not available) removed this check. Harald Freudenberger 2014-04-14 11:48:56 -05:00
• 401de8a8b5 Fix failure when confname is not given, use default ep11tok.conf instead. Harald Freudenberger 2014-04-02 12:05:12 -05:00
• 68a30e9bf0 print_mechanism() ignored bad returncodes from the called function token_specific_get_mechanism_list(). So the token init was just running fine but mechanism list kept empty (eg. because of wrong adapter configuration). Fixed this and adjusted some of the related log messages. Harald Freudenberger 2014-04-02 12:03:53 -05:00
• d510700d00 pkcsconf: remove 'M' from the optstring and the help message Petr Lautrbach 2014-03-31 10:34:42 -05:00
• 6589fae156 EP11: some README updates about usage and restrictions. Ingo Tuchscherer 2014-02-12 15:56:46 -06:00
• 9d445b0294 ep11's h_opaque_2_blob needs to catch the return code from object_mgr_find_in_map1 and return it. Joy Latten 2014-02-12 12:09:14 -06:00
• 099a3a110a Scenario: processA creates private token key object and before he can use it, processB gets it, uses it, and deletes it. Because opencryptoki was not checking the global token object count, process B segfaulted when count was zero, thinking there were objects in shared memory to search. Also, it was not checking return code of object_mgr_check_shm() in object_mgr_find_in_map1 to see if anything was found in shm. And lastly, return correct error code. Joy Latten 2014-02-12 12:06:53 -06:00
• d564279d2c ep11: switched to official m_init() function based on library change Ingo Tuchscherer 2014-02-07 15:08:27 -06:00
• f558043c9c ep11: Fixed Makefile to complement common code dependencies This will fix the side effect that the ep11 token could not plugged into slot 0, because of unresolved symbols. Ingo Tuchscherer 2014-02-07 15:03:48 -06:00
• fde048b798 Separate Diffie hellman testcase #2 into a section for clear keys and a section for secure keys. v3.1 Joy Latten 2014-01-27 15:19:02 -06:00
• 5c15f8b862 cca token does not support brainpoolP512t1, so skip it in the ec_func.c testcase. Joy Latten 2014-01-27 12:27:58 -06:00
• 90e12552d9 EP11 key-migration-tool: fixed symbol handling for ep11 library 3.1pre_branch Ingo Tuchscherer 2014-01-27 12:11:44 -06:00
• 3bdfaafbb1 Note not to install ep11.h header file in the ep11 Makefile.am Joy Latten 2014-01-26 23:58:52 -06:00
• 8590fa93f7 Update necessary files for version 3.1 Joy Latten 2014-01-26 23:38:38 -06:00
• b9ecf36d8a Add README for ep11 token and man page for ep11 migrate tool. Joy Latten 2014-01-26 23:19:28 -06:00
• 38825420db Initialize csum and ep11_opaque in ep11. Joy Latten 2014-01-26 22:33:05 -06:00
• 9da4a6174a EP11 token: removed unsupported mechanisms from mechanism list Ingo Tuchscherer 2014-01-23 15:21:42 -06:00
• 5d9cf3e8b3 Added test case conditions based on mechanism type and key length Ingo Tuchscherer 2014-01-23 15:20:36 -06:00
• 050f11b9fd EP11: Fixed key object attributes - part II Added key properties related to the class and key type Ingo Tuchscherer 2014-01-23 15:19:38 -06:00
• 21d9a7d334 ST_initialize takes a mutex lock before calling the token specific init call. Thus ep11's token specific init call does not really require a lock since its access is serialize in ST_Initialize. Joy Latten 2014-01-19 23:20:30 -06:00
• db436d2f51 Added EP11 token specific default key attributes for secret keys and EC/RSA public and private keys Ingo Tuchscherer 2014-01-19 23:19:09 -06:00
• e0ed4ca88d RSA testcase corrections. Prior changes did not consider that the test vectors included keys other than DES3 and AES to be wrapped. Joy Latten 2014-01-13 13:45:34 -06:00
• c0ba48eb32 EP11 fails with opencryptoki's version of encoding attributes. According to rfc 5208, encoding of attributes are optional. Thus can skip encoding them. Torsten Hendel 2014-01-13 13:51:34 -06:00
• f6faf70670 1. 2 lines in code had "P11TOK" instead of "EP11TOK" and this caused a symbol lookup failure. 2. reformated a function Joy Latten 2014-01-09 15:38:45 -06:00
• 555b60badb 1. opencryptoki was having problems finding ep11tok.conf. Made following corrections, - config dir is either OCK_EP11_TOKEN_DIR or OCK_CONFDIR. - The config file name is always taken from the ep11 entry in opencryptoki.conf. Joy Latten 2014-01-09 15:37:33 -06:00
• 5dd62ff398 Added error handling for memory allocations. Release pre-allocated memory in error case. Mode change in token_specific_unwrap_key. Ingo Tuchscherer 2014-01-09 15:36:30 -06:00
• 03436b602d Enable ep11 token and migrate utility only when ep11 library and required header is avaliable. Joy Latten 2014-01-09 15:34:53 -06:00
• 4c95ddd850 1. Use the rng in soft token as a generic rng. Thus in future, if a token does not implement an rng, it can use the generic one. 2. Since secure key tokens use software des3 rather than token's des3 to encrypt/decrypt private token objects, their masterkeys do not need to be generated by the token. All this end up doing is creating a blob and the blob is used for the key. Instead, just use the RNG to create a spcific number of bytes for des3 key for the software des3 to use. Joy Latten 2014-01-08 17:32:40 -06:00
• 04731e64ea Fixed configure script to conditionally enable ep11-token build. Ingo Tuchscherer 2014-01-08 17:30:30 -06:00
• 70c410993d Added installation of ep11tok.conf to Makefile Ingo Tuchscherer 2014-01-08 17:29:16 -06:00
• a8fc0b6e62 Reformated ep11_specific.c to more closely follow linux kernel coding style. Joy Latten 2014-01-08 16:50:33 -06:00
• 52dbc27f83 Add several directories to gitignore. Joy Latten 2014-01-08 16:49:54 -06:00
• a8d3862e76 Renaming of library and token config file extension. Ingo Tuchscherer 2014-01-08 16:49:11 -06:00
• f4abd1fd0c testcase fixes for secure key tokens. Torsten Hendel 2013-12-16 00:41:50 -06:00
• 657305f52b Add new EP11 token functionality orsten Hendel 2013-12-16 00:39:33 -06:00
• 95064291fe Problem: A regular user in pkcs11 group cannot issue pkcsconf -t. When shm_open() creates shared memory object, it honors umask of the caller. This patch ensures the shared memory has expected permissions when it is created. Joy Latten 2014-01-17 10:33:19 -06:00
• fef1c24a5f [PATCH] fix build with -Werror=format-security Refers to SF bug #1037228 Dan Horák 2013-12-03 12:52:32 -06:00
• f4df4a49d4 CCA token was putting incorrect OID info into CKA_ECDSA_PARAMS. This attribute must be passed in by user when generating EC keypair and should not be over-written. Since CKA_EC_POINT is for public key, does not require being in private key. Created a routine to get signature length when length only. Joy Latten 2013-11-13 15:59:59 -06:00
• ce8de9df2c Objects were not being encrypted and saved to disk for secure key token. Needed to call encrypt_data_with_clear_key() and let it determine if clear key or secure key and do appropriate actions. Joy Latten 2013-11-13 15:23:52 -06:00
• 48c87082d3 CCA token was putting incorrect OID info into CKA_ECDSA_PARAMS attribute. This attribute must be passed in by the user when generating EC keypair and should not be over-written. Joy Latten 2013-11-06 13:39:24 -06:00
• b3c5e1635e The sha256 in CCA (CSNBOWH) can take input larger than 32MB. Joy Latten 2013-10-02 17:15:34 -05:00
• 84db3078de CCA token was not importing rsa keypair correctly in v3. Joy Latten 2013-10-02 16:34:40 -05:00
• 5e7e9c8474 Update options in the pkcsconf man page to match the pkcsconf binary. Signed-off-by: Dan Horák 2013-09-04 16:35:38 -05:00
• b50eb39e3c Update the opencryptoki(7) man page and remove reference to pkcs11_startup and pk_config_data. Joy Latten 2013-09-04 16:12:38 -05:00
• 9c8ab7b0c7 Update unit file for 3.0. Dan Horák 2013-09-04 15:58:02 -05:00
• 8ea9659d64 Add missing copyright. v3.0 Joy Latten 2013-07-15 11:38:43 -05:00
• 285ae71055 More documentation. Joy Latten 2013-07-12 17:44:20 -05:00
• 12c1c71d7e Add to ChangeLog Joy Latten 2013-07-12 10:02:54 -05:00
• 3a492f7e21 Bump up version to 3.0. Joy Latten 2013-06-21 10:53:02 -05:00
• 85a0f66ece ICA token was not properly reporting when a mechanism was invalid. The return value was incorrect when a mechanism could not be found. Corrected a few return values in the ica token specific get mechanism code. Joy Latten 2013-06-21 10:46:44 -05:00
• 830a639128 Bugfix: several hmacs were in incorrect case statement. Also fixed a typo in the testcase vector for sha512 hmac. Joy Latten 2013-06-20 15:27:09 -05:00
• 7175433ac2 Update docs to reflect v3 changes. Joy Latten 2013-06-17 16:12:31 -05:00
• 684dd44bc9 Add cfb and ofb test vectors for des3. Also made a correction in one of the aes test vectors. Joy Latten 2013-06-11 22:33:12 +02:00
• 92d8978f96 Added publiched test vectors for aes-cfb8 and aes-fb128. Joy Latten 2013-06-10 18:31:51 +02:00
• 2b2bcd7aa7 Fixed Encrypt/Decrypt-Update methods for DES, DES3 and AES in CFB mode (s-bit size for single crypto operation cycle corrected) Ingo Tuchscherer 2013-06-11 03:23:02 +02:00
• 157127f277 ica-token: added support for: CBC-MAC for DES3 and AES OFB and CFB mode for DES3 and AES SHA384HMAC, SHA512HMAC new method to retrieve mechanism list for ica token Ingo Tuchscherer 2013-06-10 00:22:04 +02:00
• be895a5f2a Make using a socket for transferring slot info between pkcsslotd and the opencryptoki library the default behaviour rather than using shared memory. We still use shared memory for some process bookkeeping per slot. Joy Latten 2013-06-09 23:35:34 +02:00
• b9ed7d424a Patch[4/4]: Part 2 of slot-info via socket. Ross McIlroy 2013-06-09 22:58:23 +02:00
• 3686bd27f8 Patch[3/4]: Part 1 of slot-info via socket. Adds an option to use a unix domain socket for the transmission of slot information from the slot daemon to the library, rather than shared memory. In this patch, only ck_info is transmitted this way. Ross McIlroy 2013-06-09 04:19:28 +02:00
• 87d147f2c3 Patch[2/4]: Move the code in InitSharedMemory that populates the CKInfo and SlotInfo structures into helper functions in pkcssllotd_util.c. Ross McIlroy 2013-05-22 10:41:48 -05:00
• 4c4a109d82 Patch[1/4]: Add a CK_Info_From_Internal helper function to apiutil to avoid duplicating code. The CK_Info_From_Internal function copies the internal representation of CK_Info to the external one. Ross McIlroy 2013-05-22 09:15:28 -05:00
• 14a3b009ac Add pkcsicsf man page Joy Latten 2013-04-08 16:04:34 -05:00
• e3a8635e27 Correct usage syntax for pkcsicsf. Joy Latten 2013-04-07 23:11:03 -05:00
• d0df70cdd1 The pkcs11 group will be added externally. Joy Latten 2013-04-07 15:33:43 -05:00
• 22f8dd9d3d pkcsicsf: add support for explicit and implicit configuration Marcelo Cerri 2013-04-04 12:56:23 -03:00
• 14bd9c375f fix: properly resize token_specific_find_objects_init() internal buffer Marcelo Cerri 2013-04-03 12:40:28 -03:00
• 3792c748b3 TPM token needs to make user and TOK_OBJ directories some time during initialization. Joy Latten 2013-04-02 21:10:12 -05:00
• 793b76e753 Add token_specific_init_token_data to tpm token so it won't do masterkey stuff. Joy Latten 2013-04-02 18:13:46 -05:00
• 90d8d45dea list: fix warning on ppc Marcelo Cerri 2013-04-02 12:21:54 -03:00
• 5180a9a31d test: add mechanism name to skip messages Marcelo Cerri 2013-04-02 11:17:22 -03:00
• 4219a58705 Refactored copyobject testcase since was failing. Joy Latten 2013-04-01 18:49:02 -05:00
• bd7e113e35 ICSF's token_specific_copy_object was not mapping icsf error code to ock error codes. Also, icsf reason 3034 should map to attribute_read_only. Joy Latten 2013-04-01 18:47:06 -05:00
• e869bfcb21 Debug correction. Joy Latten 2013-04-01 17:40:33 -05:00
• c0fb8c5ea3 DSA test case corrections. Joy Latten 2013-04-01 17:37:27 -05:00
• 3e1055590a Corrections in error messages. Joy Latten 2013-04-01 17:35:02 -05:00
• f627ce63a6 Check mechanism to see if key wrapping supported before running key wrap testcases. Joy Latten 2013-04-01 17:28:46 -05:00
• f4a1db08a2 fix: check for a NULL list in for_each_list_entry() Marcelo Cerri 2013-04-01 17:17:23 -03:00
• 3890d18e84 fix: properly return the length needed when signing with private keys Marcelo Cerri 2013-04-01 16:16:57 -03:00
• c9705750b2 fix: add libraries required by 390x Marcelo Cerri 2013-04-01 16:16:20 -03:00
• d614a92e75 Corrected aes testcases that were looking for incorrect return code as well as not checking if the mechanism supported key wrapping. Joy Latten 2013-04-01 13:44:46 -05:00
• 68203e9c70 fix: user returned values from token-specific functions Marcelo Cerri 2013-04-01 15:10:13 -03:00
• 533ea07c70 load token data when initializing. Dont use shared memory. Otherwise, when /var/lib/opencryptoki/<token> dir is removed, cannot reinitialize token because it is getting info like pin in shared memory and not from nvtok.dat to start over. Thus unable to re-initialize a token whose info was removed. Joy Latten 2013-03-28 16:31:56 -05:00
• 77a88f89cf Add 2 additional assertions. 1. CKM_SSL3_MASTER_KEY_DERIVE has implicit (implied) attributes, so testcase checks that the implementation adds the required attributes to the derived key if the user did not specify them. Joy Latten 2013-03-27 20:20:26 -05:00
• 351faf9104 icsf: add test case for multiple keys derivation Marcelo Cerri 2013-03-27 15:05:32 -03:00
• 8aa426edf6 icsf: add multiple keys derivation Marcelo Cerri 2013-03-26 10:46:13 -03:00
• b61c4f5a73 More refactoring for ssl3_func.c Joy Latten 2013-03-26 11:30:20 -05:00
• 5af403023c Refactored ssl3 testcases in ssl3_func.c Joy Latten 2013-03-26 11:29:34 -05:00
• 43d950cbb3 Refactored the Diffie Helman testcase in dh_func.c Joy Latten 2013-03-26 11:28:46 -05:00
• a5e9353ef9 CKM_SSL3_SHA1_MAC and CKM_SSL3_MD5_MAC require mechanism parameters in ICSF token. Joy Latten 2013-03-26 11:25:01 -05:00
• 6f935096b6 derive key in ICSF should accept null attributes. Joy Latten 2013-03-26 11:24:00 -05:00
• 5a17f4afe4 Add DeriveKey to ock and icsf token. Joy Latten 2013-03-22 11:04:45 -05:00
• 66db3c7def on ppc64 compiler complained about implicit use. needed include files. Joy Latten 2013-03-20 23:12:36 -05:00
• 7e037485db Add SSL3 MAC mechanisms to sign and verify for ICSF token. Joy Latten 2013-03-20 23:11:33 -05:00
• f8cbe209fd ber_scanf on ppc64 seems to not like our assigning an int to a size_t Joy Latten 2013-03-20 23:10:36 -05:00
• 64c3c1eae6 Add signed hashes to ock layer in ICSF token. Joy Latten 2013-03-20 23:09:40 -05:00
• 8d0dc83443 Remove reference to parameter since none of the sign and verify mechanisms require it. Joy Latten 2013-03-20 23:06:38 -05:00
• 450958e0a7 Add signed hash call to icsf layer. Joy Latten 2013-03-20 23:05:49 -05:00
• cbc64ae6cc icsf: add support for SASL authentication Marcelo Cerri 2013-03-19 10:07:56 -03:00
• a9d324fe49 test: fix key wrapping test case Marcelo Cerri 2013-03-14 11:18:53 -03:00