Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 5e6e4b42f2 Fix symlink-following vulnerabilities (CWE-59) Pavel Kohout 2026-01-13 00:00:00 +00:00
• 9eb7951a9c COMMON: Set CKA_PRIVATE=TRUE by default for secret and private keys Ingo Franzki 2026-01-09 11:49:15 +01:00
• 5876c11dfc EP11: Add firmware version check for mechanism CKM_IBM_EC_AGGREGATE Ingo Franzki 2026-01-13 10:49:00 +01:00
• aa8e609044 EP11: Correct host library version check for FIPS-SESSION mode Ingo Franzki 2026-01-13 10:23:46 +01:00
• fc0dea09e3 TRAVIS: Upgrade to Noble (24.04) Ingo Franzki 2026-01-13 11:40:36 +01:00
• 0ca3ea878d EP11: Fix the EP11 host library version check for BLS12 381 curve. Vishnudatha Kanjur 2026-01-12 13:32:00 +01:00
• 27d4801566 ICA: Cleanup confusing AAD processing in multipart AES-GCM on libica KMA path Ingo Franzki 2026-01-08 11:09:33 +01:00
• e37e9127de COMMON: Fix CKM_ECDH_AES_KEY_WRAP buffer size calculation with compressed keys Ingo Franzki 2026-01-08 10:48:29 +01:00
• 5c74375322 EP11: Handle CKR_KEY_NEEDED at m_WrapKey() with mechanism CKM_IBM_CPACF_WRAP Ingo Franzki 2025-11-27 16:03:44 +01:00
• 150d5ec2d9 P11SAK: Add option to list-key command to show EP11 session IDs Ingo Franzki 2025-11-26 13:33:43 +01:00
• c4da583639 COMMON: Make max number of token objects configurable Ingo Franzki 2025-11-12 10:24:32 +01:00
• 6cf3a809fa COMMON: Optimize token shared memory segment size Ingo Franzki 2025-11-12 09:31:26 +01:00
• 68399abca8 Bumping up to version-3.26 v3.26.0 Ingo Franzki 2025-10-29 16:29:57 +01:00
• 8502474019 EP11: Fix private secure key blob import Ingo Franzki 2025-11-10 08:54:23 +01:00
• 31a30aae4f EP11: Fix required firmware versions for ML-DSA/ML-KEM mechanisms Ingo Franzki 2025-11-06 16:41:53 +01:00
• 2f31e378d1 EP11: Fix unwrapping of attribute bound EC keys Ingo Franzki 2025-11-06 15:27:36 +01:00
• b44b59a7cd COMMON: Fix code scan finding: Ensure variable is initialized Ingo Franzki 2025-11-03 09:02:41 +01:00
• 0e4f4b126e P11SAK: Fix code scan finding: Check the right pointer after calloc Ingo Franzki 2025-11-03 08:50:17 +01:00
• 9b2cf27584 COMMON: Fix code scan finding: Memory leak and remove unused variable Ingo Franzki 2025-11-03 08:47:00 +01:00
• 1982035091 COMMON: Fix code scan finding: Uninitialized variable access Ingo Franzki 2025-10-31 09:16:01 +01:00
• e57ca5f658 EP11: Fix code scan finding: Uninitialized variable access Ingo Franzki 2025-10-31 09:09:30 +01:00
• 2f21ef8938 COMMON: Fix code scan finding: Possible file handle leak Ingo Franzki 2025-10-31 09:00:53 +01:00
• 73faec8193 COMMON: Fix code scan finding: Possible memory leak Ingo Franzki 2025-10-31 08:56:04 +01:00
• 10b97becbc P11KMIP: Fix code scan finding: Initialize attrs array and return rc Ingo Franzki 2025-10-30 17:03:42 +01:00
• 8f532f9fd0 EP11: Fix code scan findings: Double free and NULL-pointer dereference Ingo Franzki 2025-10-30 16:53:41 +01:00
• d0ef380bfe TESTCASES: Fix code scan finding: Initialize key handle arrays Ingo Franzki 2025-10-30 16:50:05 +01:00
• 9b7d410f8e TESTCASES: Enhance test for CKM_IBM_ML_KEM_WITH_ECDH Ingo Franzki 2025-04-15 11:43:54 +02:00
• bf499edb51 CCA: Add support for CKM_IBM_ML_KEM_WITH_ECDH mechanism Ingo Franzki 2025-04-28 14:18:40 +02:00
• 51968c6219 EP11: Add support for CKM_IBM_ML_KEM_WITH_ECDH mechanism Ingo Franzki 2025-04-15 14:10:52 +02:00
• 669379e31a SOFT: Add support for CKM_IBM_ML_KEM_WITH_ECDH mechanism Ingo Franzki 2025-04-15 09:46:28 +02:00
• d806365f89 COMMON: Make CKM_IBM_ML_KEM_WITH_ECDH mechanism known to common code Ingo Franzki 2025-04-15 09:04:33 +02:00
• 1a41c4940e COMMON: Add defines for CKM_IBM_ML_KEM_WITH_ECDH mechanism Ingo Franzki 2025-04-15 08:58:40 +02:00
• 7743b331c2 PKCSCCA: Remove unused variable Ingo Franzki 2025-10-16 16:52:11 +02:00
• 3b79811a5d PKCSCCA: Add support to reencipher IBM ML-DSA and IBM ML-KEM keys Ingo Franzki 2025-03-31 11:10:47 +02:00
• 809c47b28f CCA: Add support for generating and importing IBM ML-KEM keys Ingo Franzki 2025-05-23 10:24:05 +02:00
• 1c16830fb9 CCA: Add support for sign/verify with the IBM ML-DSA mechanism Ingo Franzki 2025-05-23 10:16:42 +02:00
• 8a6ec55e44 CCA: Add support for generating and importing IBM ML-DSA keys Ingo Franzki 2025-05-23 10:13:28 +02:00
• 8c302693de SOFT: Add support for ML-KEM via OQS-Provider/OpenSSL 3.5 Ingo Franzki 2025-03-19 11:15:28 +01:00
• d4dfa5d645 SOFT: Add support for ML-DSA via OQS-Provider/OpenSSL 3.5 Ingo Franzki 2025-03-17 16:27:11 +01:00
• 7698f02766 COMMON: Add support for ML-KEM key gen and derive (KEM) Ingo Franzki 2025-03-19 11:06:00 +01:00
• 8edb2b5710 TESTCASES: Add ML-DSA and ML-KEM keys to p11sak tests Ingo Franzki 2025-03-14 10:13:41 +01:00
• 5e27911d0a P11SAK: Add support for IBM-ML-DSA and IBM-ML-KEM key types Ingo Franzki 2025-05-21 11:04:27 +02:00
• 78a5864d7f TESTCASES: Update cca_ep11_export_import_test to also test ML-DSA and ML-KEM Ingo Franzki 2025-04-01 09:58:16 +02:00
• 832e74884f TESTCASES: Add ML-KEM to tok2tok_transport test Ingo Franzki 2025-03-13 17:53:05 +01:00
• 0a4efcc6e1 TESTCASES: Add ML-DSA to tok2tok_transport test Ingo Franzki 2025-03-13 17:11:36 +01:00
• 7f387c9731 TESTCASES: Add testcases for IBM ML-DSA and IBM ML_KEM Ingo Franzki 2025-01-17 15:28:52 +01:00
• 03ac4e044c EP11: Add support for ML-KEM key derivation Ingo Franzki 2025-03-12 10:14:59 +01:00
• e73ea59584 COMMON/EP11: Support for CK_IBM_SIGN_ADDITIONAL_CONTEXT mechanism param Ingo Franzki 2025-03-12 09:02:18 +01:00
• 237379d7a7 EP11: Add support for wrapping/unwrapping IBM-ML-DSA and IBM-ML-KEM keys Ingo Franzki 2025-03-13 17:11:05 +01:00
• a13c438cbe EP11: Add support for importing IBM-ML-DSA and IBM-ML-KEM keys Ingo Franzki 2025-03-12 11:46:09 +01:00
• 34a1a4fb5e EP11: Add support for generating IBM ML-DSA and IBM ML-KEM keys Ingo Franzki 2025-01-17 14:44:40 +01:00
• 08b01335dd EP11: Report new PQC ML-DSA and ML-KEM mechanisms if supported Ingo Franzki 2025-01-17 14:18:12 +01:00
• 4dc0568ebd EP11: Add new PQC ML-DSA and ML-KEM related control points Ingo Franzki 2025-01-15 14:42:00 +01:00
• 5479612396 COMMON: Make ML-DSA and ML-KEM mechs, attrs, keytype known to common code Ingo Franzki 2025-05-20 09:48:26 +02:00
• 1440e408f8 COMMON: Add OIDs of ML-DSA and ML-KEM algorithms Ingo Franzki 2025-01-15 17:10:17 +01:00
• 71b8ce2fee COMMON: Add ML-DSA and ML-KEM definitions to pkcstypes.h Ingo Franzki 2025-01-15 14:33:19 +01:00
• a31f4940da EP11: Update ep11 header files Ingo Franzki 2025-01-15 14:24:01 +01:00
• 28ce775886 EP11: Initialize blobs used by RETRY_REENC_BLOB_START macro Vishnudatha Kanjur 2025-10-29 10:49:50 +01:00
• fe7f4917e0 P11SAK: Add support for EC curve BLS12-381 Ingo Franzki 2025-10-24 08:45:04 +02:00
• c11452dcae Testcase Update for BLS12 381 mechanism. Vishnudatha Kanjur 2025-07-30 14:28:06 +02:00
• 84a349204c EP11: BLS 12 381 curve aggregation inclusion using CKM_IBM_EC_AGGREGATE Vishnudatha Kanjur 2025-07-30 14:03:48 +02:00
• 2d0bed0820 EP11: Generate Key, Sign and Verify support for BLS 12 381 curve Vishnudatha Kanjur 2025-07-23 13:49:09 +02:00
• 26daeddbd3 POLICY: Fix allowed curve checking Ingo Franzki 2025-10-28 11:04:46 +01:00
• 6f69fd8751 PKCSCONF: Fix memory leak in case of error Ingo Franzki 2025-10-28 10:16:10 +01:00
• 1b987c276b EP11: Fix concurrent MK change for Kyber-KEM using C_DeriveKey Ingo Franzki 2025-10-15 16:44:43 +02:00
• 713131113c TESTCASES: Add test for cancel operation via init call Ingo Franzki 2025-10-08 14:52:54 +02:00
• 1ab34f3c0e COMMON: Support cancel of operation via NULL mechanism pointer at init call Ingo Franzki 2025-10-08 14:41:16 +02:00
• d77e58a442 CCA: Trim RSA public exponent when retrieved from CCA key tokens Ingo Franzki 2025-10-08 09:38:10 +02:00
• 98817512d2 TESTCASES: Add RSA 8192-bit support for CCA key blob import tests Ingo Franzki 2025-06-17 08:51:27 +02:00
• 494b9a9546 CCA: Support RSA key sizes up to 8192 bits Ingo Franzki 2025-06-11 15:43:23 +02:00
• 7cc2691dd0 COMMON: Allow filter of ock_generic_get_mechanism_info() to adjust mech info Ingo Franzki 2025-06-13 08:27:50 +02:00
• ad1caf87fc COMMON: Do not leave incomplete files behind if process is killed Ingo Franzki 2025-09-17 10:39:03 +02:00
• 66cfe6e921 P11SAK: Fix man page Ingo Franzki 2025-09-05 14:33:09 +02:00
• a3eb2b1f6b P11SAK: Support exporting private keys to password protected PEM files Ingo Franzki 2025-08-27 10:41:59 +02:00
• f37a55bf1d P11SAK: Man page fixes Ingo Franzki 2025-08-27 11:11:06 +02:00
• 7e4be10b89 P11KMIP: Document the use of HSM-protected client key in man page Ingo Franzki 2025-08-26 10:05:16 +02:00
• 4ec954330c P11KMIP: Allow to use PKCS#11 URIs directly for client private key Ingo Franzki 2025-08-26 11:28:19 +02:00
• 9c8352c4de P11KMIP: Tolerate already initialized and already logged in errors Ingo Franzki 2025-08-25 16:05:34 +02:00
• c2c466f414 TESTCASES: Add key wrap tests for p11sak_tests.sh Ingo Franzki 2025-08-12 13:31:17 +02:00
• d79492dda2 P11SAK: Update man page to describe wrap-key and unwrap-key Ingo Franzki 2025-08-12 13:33:52 +02:00
• 4a9a7b4729 P11SAK: Add support for key wrap and unwrap Ingo Franzki 2025-08-04 10:32:20 +02:00
• 655accff77 P11SAK: Print values of enumeration options in help output Ingo Franzki 2025-08-12 08:35:10 +02:00
• 6901e44aa7 P11SAK: Support options per enum value Ingo Franzki 2025-08-04 11:35:17 +02:00
• bcf5134c39 P11SAK: An enum value can now also have a description Ingo Franzki 2025-08-04 11:13:43 +02:00
• adae134dea P11SAK: Editorial corrections in help test and man page Ingo Franzki 2025-08-12 14:20:10 +02:00
• 06f9b0761f PKCSSLOTD: Remove the use of MD5 Ingo Franzki 2025-08-13 13:50:24 +02:00
• ce665a9728 TESTCASES: Add tests for CKM_RSA_X9_31_KEY_PAIR_GEN Ingo Franzki 2025-08-07 09:00:21 +02:00
• ef8f793743 COMMON/EP11: Fix keygen with CKM_RSA_X9_31_KEY_PAIR_GEN Ingo Franzki 2025-08-06 13:11:41 +02:00
• 5d74682f20 COMMON: Fix decoding of DH private key Ingo Franzki 2025-08-08 11:47:47 +02:00
• 2159b3762f TESTCASES: Fix AES-CTR testcases to use the correct counter size (in bits) Ingo Franzki 2025-08-06 11:19:01 +02:00
• 5279bcb1cd COMMON: Fix AES-CTR counter width bits vs bytes confusion Ingo Franzki 2025-08-06 09:58:12 +02:00
• 952e4f2baa COMMON: Fix AES-CTR counter width range checking Ingo Franzki 2025-08-01 08:43:31 +02:00
• 2fe148560a Fix covscan findings Ingo Franzki 2025-07-21 11:02:42 +02:00
• 0643b0a14b COMMON: Fix detection of EC curve not supported by OpenSSL Ingo Franzki 2025-07-09 09:09:32 +02:00
• ad80409c5f POLICY: Correct checking of mechanism flags after policy adjustment Ingo Franzki 2025-06-23 15:53:48 +02:00
• 72fee180d1 SOFT: Report CKF_EC_UNCOMPRESS and CKF_EC_COMPRESS flags for EC mechanisms Ingo Franzki 2025-06-23 15:57:26 +02:00
• d30c868c6a ICA: Report CKF_EC_UNCOMPRESS and CKF_EC_COMPRESS flags for EC mechanisms Ingo Franzki 2025-06-23 15:57:16 +02:00
• 5c96873843 CCA: Report CKF_EC_UNCOMPRESS and CKF_EC_COMPRESS flags for EC mechanisms Ingo Franzki 2025-06-23 15:57:04 +02:00
• 7be936e5b7 EP11: Set flag CKF_EC_COMPRESS for EC mechanisms in mechanism info Ingo Franzki 2025-06-23 15:26:07 +02:00
• b80abe1cfc COMMON/CCA/ICA/SOFT/ICSF: Change CKF_EC_NAMEDCURVE to CKF_EC_OID Ingo Franzki 2025-06-23 15:42:04 +02:00