Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 62118e98de CCA: Use snprintf instead of sprintf for AP-bus sysfs functions Ingo Franzki 2026-08-04 10:27:37 +02:00
• 6a81377655 EP11: Use snprintf instead of sprintf for AP-bus sysfs functions Ingo Franzki 2026-08-04 10:27:17 +02:00
• 60b067a82b ICSF: Reject zero length attributes in icsf_policy_get_attr() Ingo Franzki 2026-08-04 10:12:56 +02:00
• f42f3665c0 COMMON: Refuse too large token objects from being written to disk Ingo Franzki 2026-08-04 10:08:13 +02:00
• 244150e8dc EP11: Avoid integer overflow in add_serial_number() Ingo Franzki 2026-08-04 10:01:52 +02:00
• 0b3b56c65b COMMON: Use freshly decoded length in ber_encode_DSA/DHPublicKey Ingo Franzki 2026-08-04 09:57:07 +02:00
• 5315095318 EP11: Avoid integer overflow for extended capabilities query Ingo Franzki 2026-08-04 09:46:20 +02:00
• 84c3f02b6f CCA: Avoid integer overflow in DES-CBC and AES-CBC Ingo Franzki 2026-08-04 09:40:14 +02:00
• 658b475eac P11KMIP: Fix heap buffer overflow Ingo Franzki 2026-08-03 14:40:41 +02:00
• e2a07d6753 COMMON: Cleanse sensitive keys when no longer used in mech functions Ingo Franzki 2026-07-30 17:34:38 +02:00
• 363bc1fe30 COMMON: Cleanse protected keys on stack/heap when no longer used Ingo Franzki 2026-07-30 17:33:12 +02:00
• 6da5f48128 COMMON: Cleanse sensitive data when no longer used in loadsave.c Ingo Franzki 2026-07-28 13:25:22 +02:00
• a431062e86 COMMON/ICSF/TPM: Cleanse sensitive PIN related data when no longer used Ingo Franzki 2026-07-30 08:27:20 +02:00
• 4f85c94ce1 ICSF: Prevent from buffer overrun when copying token infos Ingo Franzki 2026-07-29 11:46:23 +02:00
• 901db49757 TPM: Fix srk mode lookup Ingo Franzki 2026-07-29 15:11:24 +02:00
• da6cf215af TPM: Use snprintf instead of sprintf to avoid buffer overrun Ingo Franzki 2026-07-29 11:51:22 +02:00
• 2d6ad3bf05 COMMON/PKCSTOK_ADMIN/PKCSTOK_MIGRATE: Prevent symlink-following for directories Ingo Franzki 2026-07-31 08:49:33 +02:00
• 5c31aea809 COMMON/PKCSSLOTD/TPM: Create lock files with O_NOFOLLOW to prevent symlink-following Ingo Franzki 2026-07-29 11:34:21 +02:00
• b60e444cd0 PKCSCONF/COMMON: Unify user group check between pkcsconf, apiutil and shrd_mem Ingo Franzki 2026-07-29 13:26:24 +02:00
• 1c2c74f75a COMMON/PKCSSLOTD/PKCSCONF: Fix group membership check Ingo Franzki 2026-07-29 13:16:58 +02:00
• 2bb0e01e81 PKCSSLOTD: Prevent symlink-following for slot daemon logging Ingo Franzki 2026-07-29 11:23:13 +02:00
• 732eafe1b3 PKCSSLOTD: Prevent symlink-following for the pid file Ingo Franzki 2026-07-29 10:59:59 +02:00
• d93e6a0c66 PKCSTOK_ADMIN: Fix TOCTOU issue in set_file_permissions() Ingo Franzki 2026-08-04 09:13:37 +02:00
• 0172e22d78 PKCSTOK_ADMIN: Prevent symlink-following during remove_recursive() Ingo Franzki 2026-07-29 10:41:09 +02:00
• e06313aebb PKCSICSF: Prevent from symlink-following when creating config files Ingo Franzki 2026-07-29 11:17:02 +02:00
• f001d02e27 PKCSICSF: Fix remove file logic Ingo Franzki 2026-07-29 10:36:44 +02:00
• 5ad9fca03a PKCSCCA: Fix possible buffer overrun Ingo Franzki 2026-07-29 11:40:34 +02:00
• 95f6efa0ca PKCSCCA: Prevent from symlink-following on version migration operation Ingo Franzki 2026-07-29 10:32:58 +02:00
• 383b05c699 PKCSTOK_MIGRATE: Simplify file/directory existence check Ingo Franzki 2026-08-04 09:02:27 +02:00
• 13e377349b PKCSTOK_MIGRATE: Prevent 2 more places from symlink-following Ingo Franzki 2026-07-29 10:29:26 +02:00
• 998b979edd P11SAK: Prevent symlink-following for URI pin-source file Ingo Franzki 2026-07-29 10:23:01 +02:00
• a1ba8a5b81 COMMON: Prevent symlink-following attacks with trace files Ingo Franzki 2026-07-29 10:03:50 +02:00
• 0ef5eeb2b2 ICA: Free the cached libica Edwards key object to avoid a memory leak Ingo Franzki 2026-07-29 09:50:38 +02:00
• c39c69820f COMMON: Silence erroneously pushed OpenSSL error Ingo Franzki 2026-07-29 08:56:55 +02:00
• be4ffb065d COMMON: Check EC prime len calculations Ingo Franzki 2026-07-28 16:56:25 +02:00
• c85de7d326 COMMON: Correct ber_encode_RSAPublicKey and avoid overflow Ingo Franzki 2026-07-28 16:51:09 +02:00
• 65c51ef599 COMMON: Avoid overflow in ssl3_key_and_mac_derive() Ingo Franzki 2026-07-28 16:43:37 +02:00
• b0e1751250 COMMON: Avoid overflow in ecdh_pkcs_derive() Ingo Franzki 2026-07-28 16:38:19 +02:00
• ab4a8945b8 COMMON: Avoid overflow in ckm_kdf_X9_63() and ckm_kdf_sp800_56c() Ingo Franzki 2026-07-28 16:34:00 +02:00
• 68d9e8866d COMMON: Check length in ber_encode_INTEGER/BIT_STRING to avoid overflow Ingo Franzki 2026-07-28 16:28:43 +02:00
• fdfeb75328 COMMON: Check input length for ckm_aes_wrap_format Ingo Franzki 2026-07-28 15:40:45 +02:00
• 152c55ad37 COMMON: Avoid an overflow during length checking in rsa_format_block Ingo Franzki 2026-07-28 15:35:49 +02:00
• 7277674d9e COMMON: Check length in RSA PSS encode and verify functions Ingo Franzki 2026-07-28 15:31:55 +02:00
• 43abbb1e9c COMMON: Check input length for AES-GCM encrypt and decrypt functions Ingo Franzki 2026-07-28 15:23:00 +02:00
• 39dde29acb COMMON: Check input length for CBC pad and AES-KWP encrypt functions Ingo Franzki 2026-07-28 15:11:13 +02:00
• 0a3f493379 COMMON/ICA: Check for input message overflows Ingo Franzki 2026-07-28 15:03:13 +02:00
• a9695ccce5 TRAVIS: Remove -Wno-error=unused-but-set-variable for clang builds Ingo Franzki 2026-07-28 14:49:16 +02:00
• 7d0b30b79a CONFIG: Suppress -Wunused-but-set-variable in generated code Ingo Franzki 2026-07-28 14:46:11 +02:00
• 61e51cb811 COMMON/TPM: Remove use of system() to remove files Ingo Franzki 2026-07-28 14:01:42 +02:00
• efcc3098ad COMMON: Prevent integer overflow in p11_buffer_append_len() Ingo Franzki 2026-07-28 13:29:19 +02:00
• 0bae57e60c COMMON: Add length check in p11_ahex_dump to avoid overflow Ingo Franzki 2026-07-28 13:17:25 +02:00
• 72499cefb3 COMMON: Fix double add and integer overflow in find_build_list_cb() Ingo Franzki 2026-07-28 11:59:32 +02:00
• 480d29cf96 COMMON: Fix mechlist handling if policy rejects all mechanisms Ingo Franzki 2026-07-28 11:52:48 +02:00
• 1fe108f0f5 COMMON: Avoid overflow in ML-DSA prehashed message encoding Ingo Franzki 2026-07-28 11:47:06 +02:00
• 43159fe402 COMMON: Avoid out-of-bounds write on empty files Ingo Franzki 2026-07-28 11:33:00 +02:00
• 0f438d13fc COMMON: Check size fields in token objects to be in range Ingo Franzki 2026-07-28 11:26:49 +02:00
• 087117e0b1 COMMON: Increase static buffer size to avoid buffer overrun Ingo Franzki 2026-07-28 11:16:53 +02:00
• 63c2f0ae0c COMMON: Use ock_snprintf instead of sprintf to avoid buffer overruns Ingo Franzki 2026-07-28 11:11:58 +02:00
• efeae1f27f Fix typos and errors in README.md and p11sak man page Karel Srot 2026-08-05 10:50:16 +02:00
• 5735d37e82 P11KMIP: Fix kmip_parse_decimal_uint() to reject negative numbers Ingo Franzki 2026-07-03 10:06:24 +02:00
• 903375abc5 P11KMIP: Fix possible NULLL pointer dereference Ingo Franzki 2026-07-03 10:05:43 +02:00
• fd905d4fb6 P11KMIP: Detect possible length overflow situations Ingo Franzki 2026-07-03 10:04:53 +02:00
• f1fb184bb8 P11KMIP: Fix error checking in kmip_node_clone() Ingo Franzki 2026-07-03 10:03:24 +02:00
• 7f40674f04 P11KMIP: Fix invalid return of -1 for an unsigned int Ingo Franzki 2026-07-03 10:02:28 +02:00
• 166f457a8b P11KMIP: Fix parsing of optional 'name' element Ingo Franzki 2026-07-03 10:00:56 +02:00
• 63b12bc75c P11KMIP: Fix integer overflow with large value length Ingo Franzki 2026-07-03 10:00:08 +02:00
• 3394039daa P11KMIP: Fix size underflow when padding bytes exceed remaining size Ingo Franzki 2026-07-03 09:59:21 +02:00
• 8f73c5d967 P11KMIP: Fix integer overflow in kmip_format_hex() Ingo Franzki 2026-07-03 09:58:29 +02:00
• 77b51f5524 P11KMIP: Fix signed-integer overflow in TTLV tag/length byte-shift Ingo Franzki 2026-07-03 09:57:27 +02:00
• a2a02ee106 P11KMIP: Limit the nesting level of KMIP STRUCTURE recursion Ingo Franzki 2026-07-03 09:56:13 +02:00
• 7199ab7281 P11KMIP: Protect from symlink-following attacks Ingo Franzki 2026-07-03 09:52:14 +02:00
• c621d309e2 TESTCASES: Fix build warning with set but not used variable Ingo Franzki 2026-07-24 14:19:35 +02:00
• 47b7f1929d MAKEFILE: Fix ci-installcheck for util-linux 2.42 or later Ingo Franzki 2026-07-24 09:19:50 +02:00
• ca1ac6235b Fix unused variable ‘d_size’ [-Werror=unused-variable] with OpenSSL 1.1.1 Ingo Franzki 2026-07-03 08:51:49 +02:00
• ab96be64ec TESTCASES: Fix resource leak in run_DeriveBTC Ingo Franzki 2026-07-01 14:45:56 +02:00
• 26e3591e02 TESTCASES: Add tests for the CKM_IBM_ETH_DERIVE mechanism Ingo Franzki 2026-06-24 11:25:05 +02:00
• 640c520a3a EP11: Add support for CKM_IBM_ETH_DERIVE mechanism Ingo Franzki 2026-06-24 10:21:45 +02:00
• 54b354bcaa COMMON: Add CKM_IBM_ETH_DERIVE to mechtable, policy, statistics Ingo Franzki 2026-06-24 09:58:19 +02:00
• 4c4c47f451 COMMON: Add definitions for CKM_IBM_ETH_DERIVE mechanism Ingo Franzki 2026-06-24 09:50:42 +02:00
• 3dc9fc7030 COMMON: Fix curve information for the BLS12-381 curve Ingo Franzki 2026-06-25 17:09:55 +02:00
• 627d27514e Fix build error on 32 bit systems: size_t vs CK_ULONG pointer incompatibility Andreas Tille 2026-06-23 14:30:32 +02:00
• 22b49fc8ea CCA: Fix required cipher text length for ML-KEM Ingo Franzki 2026-06-19 08:44:21 +02:00
• de51d7dd00 P11SAK: CKM_PUB_KEY_FROM_PRIV_KEY ignores CKA_DERIVE Ingo Franzki 2026-06-18 11:01:52 +02:00
• 942973a5ed COMMON: CKM_PUB_KEY_FROM_PRIV_KEY should ignore CKA_DERIVE Ingo Franzki 2026-06-18 10:55:52 +02:00
• 9305bf5104 ICA: Support recent changes in libica regarding FIPS 140-3 Ingo Franzki 2026-06-16 09:43:22 +02:00
• 1244630b7d CCA: Only support CKM_ML_DSA_KEY_PAIR_GEN with CCA 8.4 or later Ingo Franzki 2026-06-17 11:12:03 +02:00
• 3e014cdcd7 P11SAK: Fix a typo in an error message Ingo Franzki 2026-06-17 13:31:52 +02:00
• dbd41d4a6c TESTS: Add unit and fuzzing tests for object flatten and unflatten in object.c Ingo Franzki 2026-04-22 14:08:12 +02:00
• 45c14a7f76 TESTS: Add fuzzing tests for the basic BER encoding functions in asn1.c Ingo Franzki 2026-04-22 11:33:33 +02:00
• a7f2b36962 TESTS: Add unit tests for the BER encoding/decoding functions Ingo Franzki 2026-04-21 09:42:17 +02:00
• 583d0128bb Bumping up to version-3.27 v3.27.0 Ingo Franzki 2026-04-27 10:15:23 +02:00
• e5314ff05f TESTCASES: Skip if CKR_FUNCTION_CANCELED with ML-KEM with ECDH Ingo Franzki 2026-05-13 11:29:16 +02:00
• 67f2819789 TESTCASES: Skip if CKR_KEY_SIZE_RANGE at C_DeriveKey Ingo Franzki 2026-05-13 11:25:50 +02:00
• 0c4574cd0a CCA: Handle CCA return code 8 / 2149 for ECDH Ingo Franzki 2026-05-13 11:24:13 +02:00
• 6b2c50d608 CCA: Fix endianess handling for ECC key derivation info section Ingo Franzki 2026-05-13 09:04:37 +02:00
• 0a5b668415 CCA: SHA3 is not supported by CCA on Power and x86 Ingo Franzki 2026-05-13 08:43:01 +02:00
• ba2550b01f TESTCASES: Fix memory leak in run_EncapsDecapsECDH Ingo Franzki 2026-04-28 08:29:55 +02:00
• 5847880151 TESTCASES: Fix memory leak in do_EnDecapsulateDHKey Ingo Franzki 2026-04-28 08:28:51 +02:00
• f79c7f7c05 COMMON: Fix possible out-of-bounds read in attribute_array_unflatten() Ingo Franzki 2026-04-22 15:40:51 +02:00
• ecbbf6701f COMMON: Fix possible out-of-bounds read in template_unflatten_withSize() Ingo Franzki 2026-04-22 14:56:39 +02:00