Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 825324d1bf P11SAK: Add support for SHA-HMAC key types Ingo Franzki 2025-06-18 11:56:38 +02:00
• 360b6836be TESTCASES: Add tests for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-18 09:13:58 +02:00
• 337d3dbaa9 EP11: Add support for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-18 10:26:24 +02:00
• 158baf3d7a CCA: Add support for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-18 08:58:52 +02:00
• ddf61bc277 ICA: Add support for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-18 08:53:39 +02:00
• 11b5d16027 SOFT: Add support for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-18 08:47:21 +02:00
• d1b0286e12 COMMON: Add support for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-17 15:14:25 +02:00
• c2f43a8a86 COMMON: Add defines for SHA-HMAC key types and key gen mechanisms Ingo Franzki 2025-06-17 15:18:36 +02:00
• d4002a507e TESTCASES: Add tests for SHA512-224/256 key derivation mechanisms Ingo Franzki 2025-06-17 15:49:54 +02:00
• 5d611d609b COMMON/SOFT/ICA/EP11: Add support for SHA512-224/256 key derivation mechanisms Ingo Franzki 2025-06-17 15:30:34 +02:00
• a788d23611 COMMON: Add defines for SHA512-224/256 key derivation mechanisms Ingo Franzki 2025-06-17 14:36:53 +02:00
• 1bcff2377d COMMON: Fix SHA3-224 output size in mechtable Ingo Franzki 2025-06-24 10:19:54 +02:00
• c04897acbd TESTCASES: Add test vectors for larger RSA key sizes Ingo Franzki 2025-06-11 10:55:08 +02:00
• d086a7bb1b P11SAK: Allow larger RSA key sizes Ingo Franzki 2025-06-11 10:12:16 +02:00
• 848b6498c3 ICA: Fix RSA key handling for uneven key sizes Ingo Franzki 2025-06-23 10:41:31 +02:00
• e2c4b59f6a SOFT: Support RSA key sizes up to what OpenSSL supports Ingo Franzki 2021-09-08 13:07:55 +02:00
• fd13daec43 ICA: Supply libica version as hardware/firmware version in token info Ingo Franzki 2025-06-17 10:38:31 +02:00
• 5c7e59eb96 SOFT: Supply OpenSSL version as hardware/firmware version in token info Ingo Franzki 2025-06-17 10:30:48 +02:00
• 10e781c514 CCA: Supply hardware/firmware version in token info Ingo Franzki 2025-06-17 10:21:38 +02:00
• 7c19e5a44c COMMON: Allow a token to provide token info like HW, FW version, or serialno Ingo Franzki 2025-06-17 09:52:23 +02:00
• c20ccf12ba Bumping up to version-3.25 v3.25.0 Ingo Franzki 2025-05-06 10:41:13 +02:00
• e0ae5cad01 EP11: Version checks for strict-session or VHSM mode in a Secure Execution guest Ingo Franzki 2025-06-04 14:31:15 +02:00
• acca5de831 PKCSSLOTD: Check for duplicate slot number in config file Ingo Franzki 2025-06-03 14:58:38 +02:00
• 6e95bdb3dd PKCSSLOTD: Check for duplicate tokens with no 'tokname' Ingo Franzki 2025-06-03 14:46:31 +02:00
• 42633eda19 AIX: Fixes to make it compile on AIX Ingo Franzki 2025-05-28 09:38:36 +02:00
• f24ae99bc1 EP11: Reject strict-session of VHSM mode in a Secure Execution guest Ingo Franzki 2025-05-27 10:01:59 +02:00
• 07e6175b06 TESTCASES: Adjust AES tests to cover CCA's support of AES-GCM Ingo Franzki 2025-05-05 11:06:49 +02:00
• c509b4fdcf CCA: Add support for CKM_AES_GCM Ingo Franzki 2025-05-05 11:06:09 +02:00
• cb0c1a8ab8 P11KMIP: Fix Coverity scan findings Ingo Franzki 2025-05-15 16:51:17 +02:00
• 651034f1b1 Fix '-Wunterminated-string-initialization' warnings Ingo Franzki 2025-05-14 12:15:44 +02:00
• 768d5c9791 COMMON: Always allow to modify CKA_IBM_OPAQUE[_*] attributes Ingo Franzki 2025-05-14 08:46:09 +02:00
• d7af3544ed CCA: Set CKA_IBM_PROTKEY_EXTRACTABLE during import of AES DATA key blob Ingo Franzki 2025-05-08 17:32:48 +02:00
• b1509dd525 CCA: fix PKEY_MODE and AES_KEY_MODE defaults Joerg Schmidbauer 2025-05-07 11:46:10 +02:00
• 4dda122536 MAKEFILE: Add certain files to EXTRA_DIST or doc_DATA Ingo Franzki 2025-05-07 09:30:41 +02:00
• b8de9784cf RPM: Fix RPM spec to also install p11kmip.conf and p11kmip.conf man page Ingo Franzki 2025-05-07 09:55:50 +02:00
• 2c62eb8822 MAKEFILE: Also remove p11kmip.conf during uninstall Ingo Franzki 2025-05-07 09:04:07 +02:00
• 6a22e3d399 MAKEFILE: Fix EXTRA_DIST specification in kmipclient.mk Ingo Franzki 2025-05-07 08:58:42 +02:00
• 1d161f8f32 P11KMIP: Update man page and help text terminology John Craig 2025-05-05 13:58:03 -04:00
• 07944a263b CCA: Support newer mechanisms also on non-s390x platforms Ingo Franzki 2025-04-14 10:15:19 +02:00
• caf73e3f59 CCA: Fix retrieval of ACP for non-s390x platforms Ingo Franzki 2025-04-24 17:34:46 +02:00
• 8e6aee08dc CCA: Fix handling of concurrent master key change for ECDH Ingo Franzki 2025-04-28 15:53:32 +02:00
• c3e051c7f8 CONFIGURE: Allow to specify alt. libica source dir using --with-libica Ingo Franzki 2025-04-28 10:10:30 +02:00
• 9258337478 EP11/ICA: Ignore -Wstrict-prototypes when including ica_api.h Ingo Franzki 2025-04-28 09:36:57 +02:00
• e768180e7a PKCSSTATS: Fix SHM owner checking Ingo Franzki 2025-04-25 12:20:07 +02:00
• 91ecd8214a EP11: Handle concurrent MK change for Kyber-KEM using C_DeriveKey Ingo Franzki 2025-04-15 16:48:07 +02:00
• 213568b48d EP11: Support key blob import with multiple domains in Secure Execution guest Ingo Franzki 2025-04-07 11:26:44 +02:00
• 30d3a9201a CCA: Adjust CCA host library version detection for newer CCA versions Ingo Franzki 2025-04-02 16:36:45 +02:00
• 14d83ed674 TESTCASES: tok2tok_transport: Test C_WrapKey size queries Ingo Franzki 2025-03-26 08:46:36 +01:00
• 3396d50812 COMMON: Fix error with C_WrapKey size-query calls Ingo Franzki 2025-03-26 08:40:16 +01:00
• ec1b3d87ba TESTCASES: Enhance the tok2tok_transport for key wrapping with CKM_AES_GCM Ingo Franzki 2025-03-25 09:36:48 +01:00
• 4345aa3191 COMMON/SOFT/ICA: Support key wrapping with AES-GCM Ingo Franzki 2025-03-25 09:35:47 +01:00
• 48a1e7ee91 TESTCASES: Fix cca_export_import_test to handle too old EP11 firmware Ingo Franzki 2025-03-25 16:39:31 +01:00
• 7c2e6c5304 EP11: Fix key blob import error with older EP11 firmware Ingo Franzki 2025-03-25 16:38:08 +01:00
• 69db856d1f TESTCASES: Fix KMIP server key setup for p11kmip test Ingo Franzki 2025-03-25 09:04:37 +01:00
• 04b8ebea77 TESTCASES: Enhance cca_export_import_test to also support EP11 Ingo Franzki 2025-01-28 17:23:40 +01:00
• 169ab762c2 EP11: Add support for importing opaque key blobs Ingo Franzki 2025-01-22 11:35:36 +01:00
• f41b2465bc EP11: Check and apply boolean attributes from imported blob Ingo Franzki 2025-01-22 11:23:30 +01:00
• e2a5fdff9e COMMON: Allow C_CreateObject with CKA_IBM_OPAQUE for all key types Ingo Franzki 2025-01-24 09:08:59 +01:00
• cf158040d2 CI: Fail early if token initialization fails Ingo Franzki 2025-03-21 11:21:58 +01:00
• af4ac660f3 TESTCASES: Fix KMIP server setup for p11kmip test Ingo Franzki 2025-03-14 08:54:17 +01:00
• ce4cd7725c TRAVIS: Install 'curl' and 'jq' Ingo Franzki 2025-03-10 17:04:03 +01:00
• 19708dc0b4 CONFIGURE: Check for 'curl' and 'jq' tools when testcases are enabled Ingo Franzki 2025-03-10 17:00:30 +01:00
• cbddcfcd62 CI: Run p11kmip tests in the CI if KMIP env vars are set Ingo Franzki 2025-03-05 14:13:42 +01:00
• 4cfa3862e0 CONFIGURE: Check for openssl command line tool when testcases are enabled Ingo Franzki 2025-03-05 11:36:58 +01:00
• 01bd78ed25 TESTCASES: Adjust p11kmip test to produce parse-able output Ingo Franzki 2025-03-04 17:08:29 +01:00
• a24f1d5902 P11SAK/P11KMIP: Refactor code to extract commonly used functions Ingo Franzki 2025-02-28 11:51:22 +01:00
• 83efbb3a27 EP11: Check session-bound keys when CKA_TOKEN or CKA_PRIVATE is changed Ingo Franzki 2025-03-06 17:18:40 +01:00
• 10aef86e24 .gitignore: Add testcases/misc_tests/always_auth to .gitignore Ingo Franzki 2025-02-28 08:28:48 +01:00
• a6903ab08e P11KMIP: Add KMIP client source files from s390-tools Ingo Franzki 2024-07-18 16:35:30 +02:00
• 4243c70a4d P11KMIP: Add testcase for p11kmip john-craig 2024-08-15 10:37:39 -04:00
• 26bf7a1893 P11KMIP: Add p11kmip, a tool for import and exporting PKCS#11 keys to a KMIP server John Craig 2024-08-16 15:12:30 -04:00
• 9d9356d26e PKEY: Fix out-of-bounds access in Edwards curve verify Ingo Franzki 2025-01-31 08:58:06 +01:00
• 2b84e82345 TESTCASES: Minor fixes in EC tests Ingo Franzki 2025-01-31 08:25:11 +01:00
• 3f072201fb COMMON: CKA_IBM_PROTKEY_NEVER_EXTRACTABLE is read only Ingo Franzki 2025-01-30 17:03:21 +01:00
• 0462717a8d COMMON: Fix setting of CKA_IBM_PROTKEY_NEVER_EXTRACTABLE and CKA_NEVER_EXTRACTABLE Ingo Franzki 2025-01-27 08:47:47 +01:00
• a437d8e028 COMMON: Fix unwrap private keys to supply correct public attributes Ingo Franzki 2025-01-23 17:52:00 +01:00
• 51db8c3704 POLICY: Fix signature size check for the Dilithium mechanism Ingo Franzki 2025-01-20 15:46:21 +01:00
• 2b45910356 ICA: Report mechanisms dependent on if libica is in FIPS mode Ingo Franzki 2024-12-19 14:59:41 +01:00
• 1c4622928d ICA: Fix mechanism list preparation Ingo Franzki 2024-12-19 14:56:29 +01:00
• 824f38749c TESTCASES: RSA tests: Check for CKR_KEY_SIZE_RANGE and skip Ingo Franzki 2024-12-12 17:01:24 +01:00
• 2112ba9ef0 ICA: Check if libica supports small RSA public exponents Ingo Franzki 2024-12-12 17:00:05 +01:00
• f38f9e6a04 COMMON: Fix AES-KEY-WRAP with OpenSSL 1.1.1 Ingo Franzki 2024-12-16 13:05:46 +01:00
• 3f6f6d43cf TESTCASES: Skip test if C_WrapKey fails with CKR_WRAPPING_KEY_SIZE_RANGE Ingo Franzki 2024-12-12 11:31:21 +01:00
• d0d8078849 COMMON: Enhance size checking for RSA-OAEP encryption/wrapping Ingo Franzki 2024-12-12 11:27:47 +01:00
• ff6bb98b2e Drop timestamp from autogenerated files Bernhard M. Wiedemann 2024-12-12 14:37:12 +01:00
• d2489cafd3 TRAVIS: Set 'pipefail' to catch the return code of the testcases Ingo Franzki 2024-12-12 13:19:24 +01:00
• 86dcf5ddd5 Avoid incorrect copyright claims Bernhard M. Wiedemann 2024-12-12 10:22:00 +01:00
• 289b95aff2 TESTCASES: Add tests for the CKM_ECDH_AES_KEY_WRAP mechanism Ingo Franzki 2024-06-24 16:32:50 +02:00
• 403ebf2e9e ICA: Add support for the CKM_ECDH_AES_KEY_WRAP mechanism Ingo Franzki 2024-06-24 16:36:57 +02:00
• e6865447a7 SOFT: Add support for the CKM_ECDH_AES_KEY_WRAP mechanism Ingo Franzki 2024-06-24 16:34:56 +02:00
• 785d7577e1 COMMON: Add support for CKM_ECDH_AES_KEY_WRAP to key/encrypt/decrypt manager Ingo Franzki 2024-06-24 15:49:11 +02:00
• f0aa5a632b COMMON: Add CKM_ECDH_AES_KEY_WRAP mechanism defines Ingo Franzki 2024-06-24 15:40:11 +02:00
• c6a22fb682 TESTCASES: Add tests for the CKM_RSA_AES_KEY_WRAP mechanism Ingo Franzki 2024-06-21 13:46:10 +02:00
• 962b47626e CCA: Add support for the CKM_RSA_AES_KEY_WRAP mechanism with AES Ingo Franzki 2024-11-19 16:06:27 +01:00
• aa9e7461b7 CCA: Query certain ACPs during token init and APQN event Ingo Franzki 2024-11-20 11:24:36 +01:00
• 35fc251014 ICA: Add support for the CKM_RSA_AES_KEY_WRAP mechanism Ingo Franzki 2024-06-21 13:55:18 +02:00
• 735530af08 SOFT: Add support for the CKM_RSA_AES_KEY_WRAP mechanism Ingo Franzki 2024-06-21 13:54:14 +02:00
• 87d026561e COMMON: Add support for CKM_RSA_AES_KEY_WRAP to key/encrypt/decrypt manager Ingo Franzki 2024-06-24 09:14:50 +02:00
• 8a7242772e COMMON: Add CKM_RSA_AES_KEY_WRAP mechanism defines Ingo Franzki 2024-06-21 11:36:01 +02:00
• 7de37d554b TESTCASES: Add tests for CKM_AES_KEY_WRAP[_*] mechanisms Ingo Franzki 2024-06-20 11:03:13 +02:00