opencryptoki

crypt/opencryptoki

Fork 0

mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-24 05:39:17 +03:00

Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

bb8733875f COMMON: Fix typo in ML-KEM OID define and constant Ingo Franzki 2026-04-22 10:28:59 +02:00
017bb764d7 P11SAK: Allow CKA_DERIVE for all asymmetric key types Ingo Franzki 2026-03-20 08:36:28 +01:00
bd9452c519 P11SAK: Use CKM_PUB_KEY_FROM_PRIV_KEY for extracting public keys Ingo Franzki 2026-03-06 14:42:26 +01:00
4bafedb709 SOFT/ICA/CCA/EP11: Enable CKM_PUB_KEY_FROM_PRIV_KEY mechanism Ingo Franzki 2026-03-06 13:20:14 +01:00
76bd743eba COMMON: Add support for CKM_PUB_KEY_FROM_PRIV_KEY in common code Ingo Franzki 2026-03-06 11:53:29 +01:00
cfc3b8ad4f COMMON: Add CKM_PUB_KEY_FROM_PRIV_KEY to pkcs11types.h, policy and mechtable Ingo Franzki 2026-03-06 10:25:06 +01:00
41294a08a8 TESTCASES: Add the new ECDH_*_AES_KEY_WRAP mechanisms to tok2tok test Ingo Franzki 2026-03-05 16:40:04 +01:00
27cb983a84 P11SAK: Add support for the new ECDH_*_AES_KEY_WRAP mechanisms Ingo Franzki 2026-03-05 17:30:45 +01:00
29a03cc5ff SOFT/ICA: Enable the new ECDH_*_AES_KEY_WRAP mechanisms Ingo Franzki 2026-03-05 16:39:41 +01:00
65674ede7c COMMON: Add new ECDH_*_AES_KEY_WRAP mechanisms to common code Ingo Franzki 2026-03-05 16:20:59 +01:00
1c008f8524 COMMON: Add CKM_ECDH_*_AES_KEY_WRAP to pkcs11types.h, policy and statistics Ingo Franzki 2026-03-05 15:56:11 +01:00
07a4e71220 COMMON: Fix missing XThreadUnLock in XProcUnLock Ingo Franzki 2026-04-20 16:33:45 +02:00
b45481a748 EP11: Fix missing unlock if VHSM- and strict-session mode are both active Ingo Franzki 2026-04-20 16:29:18 +02:00
82314c5532 EP11: Remove unnecessary removal of leading zero bytes for DH public keys Ingo Franzki 2026-04-17 09:30:39 +02:00
823ca364f5 COMMON: Fix dh_encapsulate_key() to return the correct cipher text size Ingo Franzki 2026-04-17 09:41:09 +02:00
4abd6fa0d1 TESTCASES: Allow additional public exponent values for CCA Ingo Franzki 2026-04-16 10:53:05 +02:00
58abdc8932 CCA: Support additional public exponent values Ingo Franzki 2026-04-16 10:45:31 +02:00
3a13de065d EP11: Fix syslog message printing about different CPs Ingo Franzki 2026-04-15 08:50:05 +02:00
f2ff1dcf2b TESTCASES: Fix ECDH en-/decapsulation tests for older EP11 cards Ingo Franzki 2026-04-14 09:26:08 +02:00
7fe5e1c28f P11SAK/P11KMIP: Adjustments for OpenSSL v4.0.0 API changes and deprecations Ingo Franzki 2026-02-26 17:36:41 +01:00
69bed96e51 Fix markdown in README.md, coding_style.md and opencryptoki-howto.md Ingo Franzki 2026-04-13 10:51:12 +02:00
fcb18d55e1 Update CONTRIBUTING.md to add guidelines for AI-generated code and issues Ingo Franzki 2026-04-10 11:59:32 +02:00
6b73e1ba57 TESTCASES: Add tests for ML-KEM of PKCS#11 v3.2 to cca_ep11_export_import_test Ingo Franzki 2026-03-02 15:11:44 +01:00
214dedf268 TESTCASES: Add tests for ML-DSA of PKCS#11 v3.2 to cca_ep11_export_import_test Ingo Franzki 2026-02-17 16:54:41 +01:00
ea341db322 TESTCASES: Add PKCS#11 v3.2 ML-DSA and ML-KEM tests for p11sak Ingo Franzki 2026-02-11 16:46:24 +01:00
9b56859008 TESTCASES: Add tests for ML-DSA and ML-KEM of PKCS#11 v3.2 for tok2tok_transport Ingo Franzki 2026-02-17 10:58:05 +01:00
f38928daff TESTCASES: Add tests for ML-KEM of PKCS#11 v3.2 Ingo Franzki 2026-02-16 16:17:29 +01:00
5a83dac640 TESTCASES: Add tests for ML-DSA of PKCS#11 v3.2 Ingo Franzki 2026-02-11 11:13:46 +01:00
604fccd696 EP11: Add support for encapsulate/decapsulate with PKCS#11 v3.2 ML-KEM mechanisms Ingo Franzki 2026-03-02 11:39:52 +01:00
27800f20bd EP11: Add support for sign/verify with PKCS#11 v3.2 ML-DSA mechanisms Ingo Franzki 2026-03-02 10:30:27 +01:00
ab235bdca6 EP11: Add support for keygen and import of PKCS#11 v3.2 ML-DSA and ML-KEM keys Ingo Franzki 2026-02-24 14:52:04 +01:00
1745e4f448 PKCSCCA: Add support to reencipher PKCS#11 v3.2 ML-DSA keys Ingo Franzki 2026-02-18 08:10:28 +01:00
c897482e17 CCA: Add support for sign/verify with PKCS#11 v3.2 ML-DSA mechanisms Ingo Franzki 2026-02-18 15:12:39 +01:00
bbf50cdfd7 CCA: Add support for keygen and import of PKCS#11 v3.2 ML-DSA keys Ingo Franzki 2026-02-17 14:42:23 +01:00
ca1d682599 SOFT: Add support for PKCS#11 v3.2 ML-KEM en/decapsualte key Ingo Franzki 2026-02-16 15:27:48 +01:00
ce6a82bcd0 SOFT: Add support for PKCS#11 v3.2 ML-DSA sign and verify Ingo Franzki 2026-02-10 16:14:39 +01:00
279e9aef85 SOFT: Add support for keygen and import of PKCS#11 v3.2 ML-DSA and ML-KEM keys Ingo Franzki 2026-02-10 10:17:27 +01:00
fbeef5e8c3 P11SAK: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types Ingo Franzki 2026-02-10 09:33:15 +01:00
e1bdd445bf COMMON: Add support for ML-KEM en/decapsulate mechanism of PKCS#11 v3.2 Ingo Franzki 2026-02-16 14:23:17 +01:00
5fc3c71491 COMMON: Add support for ML-DSA sign mechanisms of PKCS#11 v3.2 Ingo Franzki 2026-02-10 11:11:00 +01:00
9767c66f8f COMMON: Add internal support for SHAKE mechanisms Ingo Franzki 2026-02-10 14:29:39 +01:00
2485a22972 COMMON: Add support for generating ML-DSA and ML-KEM key pairs Ingo Franzki 2026-02-09 16:40:47 +01:00
3a4719bbac COMMON: Add support for ML-DSA and ML-KEM key types Ingo Franzki 2026-02-09 16:24:43 +01:00
dc8c515285 COMMON: Add base support for ML-DSA and ML-KEM in PKCS#11 v3.2 Ingo Franzki 2026-02-05 08:31:38 +01:00
795fedccca COMMON: Add ML-DSA and ML-KEM PKCS#11 v3.2 defines to pkcstypes.h Ingo Franzki 2026-01-28 08:21:11 +01:00
6acd311005 TESTCASES: Add tests for DH encapsulate/decapsulate Ingo Franzki 2026-02-05 10:10:53 +01:00
8e06309b26 SOFT/EP11: Enable encapsulate/decapsulate for the DH mechanism Ingo Franzki 2026-02-05 09:21:08 +01:00
d4150fa9a8 COMMON: Add support for en/decapsulate with DH Ingo Franzki 2026-02-05 09:11:59 +01:00
c2ab1d9b8c TESTCASES: Add tests for ECDH encapsulate/decapsulate Ingo Franzki 2026-01-30 10:48:45 +01:00
4e43e2ba48 EP11 Enable encapsulate/decapsulate for the ECDH mechanism Ingo Franzki 2026-02-03 13:43:40 +01:00
c048fd777e CCA: Enable encapsulate/decapsulate for the ECDH mechanism Ingo Franzki 2026-02-23 10:33:49 +01:00
00281580e1 SOFT/ICA: Enable encapsulate/decapsulate for the ECDH mechanism Ingo Franzki 2026-01-30 09:22:54 +01:00
9018eda554 COMMON: Add support for en/decapsulate with ECDH Ingo Franzki 2026-01-29 15:39:45 +01:00
a6c55e463e TESTCASES: Add tests for RSA encapsulate/decapsulate Ingo Franzki 2026-01-29 09:13:04 +01:00
2b66c77b9a EP11: Enable encapsulate/decapsulate for RSA PKCS and OAEP mechanisms Ingo Franzki 2026-01-30 11:37:26 +01:00
b02fc3422a SOFT/ICA/CCA: Enable encapsulate/decapsulate for RSA PKCS and OAEP mechanisms Ingo Franzki 2026-01-29 09:17:12 +01:00
f506118fdd COMMON: Add support for en/decapsulate with RSA Ingo Franzki 2026-01-28 15:16:40 +01:00
eccccc8c80 COMMON: Implement C_En/DecapsulateKey functions Ingo Franzki 2026-01-28 14:23:26 +01:00
a6c5e3f736 TESTCASES: Test save/restore operation state for C_VerifySignatureInit Ingo Franzki 2026-01-28 10:59:16 +01:00
9dcfc3361e TESTCASES: Add tests for C_VerifySignature[Init/Update/Final] Ingo Franzki 2026-01-28 11:20:43 +01:00
2bcebe8831 COMMON: Implement C_VerifySignature[Init/Update/Final] functions Ingo Franzki 2026-01-28 08:49:57 +01:00
065027cf71 P11SAK: Add support for new PKCS#11 v3.2 attributes Ingo Franzki 2026-01-27 16:42:39 +01:00
249c79719b TESTCASES: Prepare and test for PKCS#11 v3.2 function list Ingo Franzki 2026-01-27 15:46:41 +01:00
f08c175a36 COMMON: Add base support for PKCS#11 v3.2 Ingo Franzki 2026-01-27 15:20:02 +01:00
30099e6135 COMMON: Add PKCS#11 v3.2 base defines to pkcstypes.h Ingo Franzki 2026-01-27 15:00:29 +01:00
fb627b57ad COMMON: Load objects with length checking Ingo Franzki 2026-03-30 15:03:40 +02:00
ed378f463e COMMON: Fix possible out-of-bounds access in BER decode functions Ingo Franzki 2026-03-30 10:19:40 +02:00
14bfe06b95 COMMON: Allow any length of DH key components Ingo Franzki 2026-03-24 13:33:22 +01:00
72a8daa33e COMMON: Fix Coverity finding: Resource leaks Ingo Franzki 2026-03-25 09:55:39 +01:00
8a81b718cb TESTCASES: Fix Coverity finding: Out-of-bounds read Ingo Franzki 2026-03-25 09:51:24 +01:00
f07577eead CCA: Fix Coverity finding: Bad free Ingo Franzki 2026-03-25 09:41:19 +01:00
57885ed7c3 COMMON: Fix Coverity finding: double unlock/double free Ingo Franzki 2026-03-25 09:35:21 +01:00
305bf39297 Fix heap buffer overrun in aeskw_unwrap_pad() error paths Denis Mingulov 2026-04-02 00:02:51 +03:00
62afaaafbb EP11: Mask CKF_DERIVE for mechanism flags of CKM_GENERIC_SECRET_KEY_GEN Ingo Franzki 2026-03-23 11:00:18 +01:00
527a971e09 COMMON: Fix DH derive to truncate the derived secret on the left Ingo Franzki 2026-03-19 11:17:58 +01:00
28d14ebef3 SOFT: Fix DH key derivation Ingo Franzki 2026-03-16 09:17:19 +01:00
bdc4758a73 COMMON: Fix decoding of DH and DSA SPKI public keys Ingo Franzki 2026-03-09 11:14:16 +01:00
870fbaeb16 COMMON: Fix invalid free in der_decode_ECPublicKey Ingo Franzki 2026-03-09 10:25:49 +01:00
346a4c65b8 P11SAK: Fix import of ML-KEM keys with private seed Ingo Franzki 2026-02-24 15:32:47 +01:00
ac90552266 COMMON: Sort mechanisms returned by C_GetMechanismList alphabetically Ingo Franzki 2026-02-24 11:27:51 +01:00
4dd1d73463 TESTCASES: Fix wrap/unwrap tests for IBM ML-DSA and IBM ML-KEM Ingo Franzki 2026-02-13 09:29:13 +01:00
24aff9d7fe COMMON: Cleanup nested digest contexts Ingo Franzki 2026-02-11 15:12:46 +01:00
678f736907 COMMON: Rename RSA_DIGEST_CONTEXT and SSL3_MAC_CONTEXT to MP_DIGEST_CONTEXT Ingo Franzki 2026-02-11 14:51:08 +01:00
f4fae7029b COMMON: Fix DH derive to produce the requested secret length Ingo Franzki 2026-02-05 10:26:49 +01:00
68c60d4ed4 P11SAK: Support ECDH-AESKW key wrapping with Montgomery keys as well Ingo Franzki 2026-02-02 13:20:48 +01:00
80b2cc99f5 TESTCASES: Add a test for CKM_ECDH_AES_KEY_WRAP with Montgomery keys Ingo Franzki 2026-02-02 11:08:56 +01:00
a5a9c2e173 COMMON: CKM_ECDH_AES_KEY_WRAP also supports Montgomery keys Ingo Franzki 2026-02-02 11:08:22 +01:00
31f1ab75db TESTCASES: Add tests for ECDH in cofactor mode Ingo Franzki 2026-02-02 10:31:29 +01:00
a36afd4480 SOFT: Add support for CKM_ECDH1_COFACTOR_DERIVE Ingo Franzki 2026-02-02 10:11:05 +01:00
bfe8fd50f5 TESTCASES: Fix return code of speed test Ingo Franzki 2026-01-27 10:10:44 +01:00
a1156d179d EP11: Add support for Edwards and Montgomery key types and mechanisms Ingo Franzki 2025-12-03 15:38:28 +01:00
f479319582 CCA: Add support for Edwards key types and mechanisms Ingo Franzki 2025-07-07 16:17:16 +02:00
c40a7a162b ICA: Add support for Edwards and Montgomery key types and mechanisms Ingo Franzki 2025-07-07 11:47:24 +02:00
b601ad8b9e SOFT: Add support for Edwards and Montgomery key types and mechanisms Ingo Franzki 2025-07-01 13:54:44 +02:00
787b0e45a5 TESTCASES: Add Edwards and Montgomery tests for p11sak Ingo Franzki 2025-07-08 14:11:57 +02:00
e4f22d1a9a TESTCASES: Enhance cca_ep11_export_import_test for Edwards curves Ingo Franzki 2025-07-08 09:17:33 +02:00
9298f52ba4 TESTCASES: Add tests for Edwards key type and mechanisms Ingo Franzki 2025-07-01 15:22:02 +02:00
227470e223 P11SAK: Add support for the Edwards and Montgomery key types Ingo Franzki 2025-07-01 10:35:23 +02:00
3fd5120a41 COMMON: Add support for Edwards and Montgomery key types and mechanisms Ingo Franzki 2025-06-30 15:20:16 +02:00
ed9954c9da COMMON: Add defines for Edwards and Montgomery key types and mechanisms Ingo Franzki 2025-06-30 15:03:28 +02:00

... 3 4 5 6 7 ...