Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• e23ff7c73f ICA: Add support for CKM_AES_KEY_WRAP[_*] mechanisms Ingo Franzki 2024-06-20 13:10:31 +02:00
• eb465296c8 SOFT: Add support for CKM_AES_KEY_WRAP[_*] mechanisms Ingo Franzki 2024-06-20 08:57:48 +02:00
• 35d1a19178 COMMON: Add AES key wrap support to key manager for wrap/unwrap Ingo Franzki 2024-06-21 10:42:45 +02:00
• 7b7830dd59 COMMON: Add AES key wrap support to encrypt/decrypt manager Ingo Franzki 2024-06-19 16:50:21 +02:00
• b193833e41 COMMON: Add CKM_AES_KEY_WRAP[_*] mechanism defines Ingo Franzki 2024-06-19 14:58:01 +02:00
• c6fb20884d Fix compile warnings when built with sanitizer Ingo Franzki 2024-12-11 11:32:45 +01:00
• 977f262cb5 CONFIGURE: Add --enable-sanitizer option for easy sanitizer builds Ingo Franzki 2024-12-11 10:51:16 +01:00
• dd641f391f CCA: Fix endless retry loop in cca_pkey_skey2pkey Ingo Franzki 2024-12-05 13:26:43 +01:00
• 5f133f19d6 TESTCASES: Fix checking of OAEP parameters for CCA Ingo Franzki 2024-12-02 14:19:45 +01:00
• a17e9263a7 COMMON: Fix checking for modify or copy Ingo Franzki 2024-12-02 13:58:57 +01:00
• a279930e33 Fix invalid use of ock_err() function Ingo Franzki 2024-11-27 14:27:52 +01:00
• 48d143e903 TESTCASES: Skip ECDH test if not allowed due to control point Ingo Franzki 2024-11-27 14:52:33 +01:00
• d0a863393d CCA: Reject ECDH properly when not allowed due to ACP Ingo Franzki 2024-11-27 14:51:23 +01:00
• 7955c8d586 TESTCASES: Fix out of bounds access Ingo Franzki 2024-11-26 14:38:05 +01:00
• 41863463ba TESTCASES: Adapt ECDH testcase for use with the CCA token Ingo Franzki 2023-12-11 17:04:41 +01:00
• a40e798c35 CCA: Add support for ECDH key derivation Ingo Franzki 2023-12-11 17:04:19 +01:00
• 61614fe4ec COMMON: Add support for secure key ECDH key derivation Ingo Franzki 2023-12-11 14:40:44 +01:00
• ac64a009bc SOFT: Correct check for PQC algorithm support Ingo Franzki 2024-11-18 09:44:27 +01:00
• 097dbc9a07 EP11: Fix handling of bPrepend flag in CK_IBM_KYBER_PARAMS Ingo Franzki 2024-11-18 08:57:33 +01:00
• f5703b6f91 testcases: Wrapping CCA AES CIPHER keys can not work, skip it Ingo Franzki 2024-11-12 13:48:07 +01:00
• 6e622ddfa1 opencryptoki.conf: Fix typo and enhance example slot definition Ingo Franzki 2024-11-11 11:46:06 +01:00
• a4e408933d COMMON: Fix -Wunused-but-set-variable compile error Ingo Franzki 2024-10-15 14:35:23 +02:00
• af7dbcb466 TRAVIS: Make sure all compile errors are shown Ingo Franzki 2024-10-15 15:17:01 +02:00
• e7d83dcb47 CI: Enable CCA CIPHER key support for slot 20 in the CI Ingo Franzki 2024-10-14 09:00:36 +02:00
• 7c2be4f13d TESTCASES: Updated cca_export_import_tests to cover CCA CIPHER keys Ingo Franzki 2024-10-07 10:00:38 +02:00
• 08b1b744c8 CCA: Allow to convert AES DATA keys to AES CIPHER keys Ingo Franzki 2024-10-07 11:54:30 +02:00
• 90dc9231a0 CCA: Allow to choose CCA AES secure key mode via CKA_IBM_CCA_AES_KEY_MODE Ingo Franzki 2024-06-17 14:09:11 +02:00
• bc42ef4899 CCA: EC secure key blob import: Set CKA_IBM_PROTKEY_EXTRACTABLE Ingo Franzki 2024-06-14 08:48:06 +02:00
• ef6e44d014 PKCSCCA: Add support for offline reencipher of AES CIPHER keys Ingo Franzki 2024-06-12 15:30:13 +02:00
• 3fa1080b54 CCA: Export restrict CCA HMAC key according to CKA_EXTRACTABLE Ingo Franzki 2024-06-12 15:04:37 +02:00
• ed70790820 CCA: Restrict export on setting CKA_EXTRACTABLE to FALSE Ingo Franzki 2024-06-12 13:22:16 +02:00
• 802f948c60 CCA: Reject key wrapping/unwrapping of AES CIPHER keys Ingo Franzki 2024-06-12 11:38:31 +02:00
• 3c664369e3 CCA: Import AES CIPHER secure keys if configured Ingo Franzki 2024-06-12 10:01:06 +02:00
• 3ae17ec17a CCA: Generate AES CIPHER secure key if configured Ingo Franzki 2024-06-11 14:14:46 +02:00
• d038b45a08 CCA: Add 'AES_KEY_MODE' config option Ingo Franzki 2024-06-11 14:26:39 +02:00
• f236514a61 COMMON: Fix use after free warnings Ingo Franzki 2024-10-14 11:11:12 +02:00
• c71d6ef14f Fix resource leak Than Ngo 2024-10-29 13:41:23 +01:00
• 7e9b1b64c0 DOC: Fix link to Opencryptoki manual Ingo Franzki 2024-11-07 10:23:50 +01:00
• 7f267d7736 EP11: Support SHA3 variants of RSA-PKCS and ECDSA mechanisms Ingo Franzki 2024-09-24 11:26:53 +02:00
• fb0ad32133 EP11: Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP Ingo Franzki 2024-09-24 10:03:21 +02:00
• 99209d1004 EP11: Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms Ingo Franzki 2024-09-23 16:33:03 +02:00
• 0d8c133913 TESTCASE: Add SHAKE key derivation tests Ingo Franzki 2024-09-23 12:01:25 +02:00
• 937cf18f73 ICA: Add support for SHAKE key derivation Ingo Franzki 2024-09-23 14:07:30 +02:00
• c40b44c858 SOFT: Add support for SHAKE key derivation Ingo Franzki 2024-09-23 12:00:14 +02:00
• 7f0ea20303 COMMON: Add SHAKE key derivation mechanisms to common code Ingo Franzki 2024-09-23 11:21:45 +02:00
• a11fcfd8ee COMMON: Add defines from PKCS#11 v3.0 for SHAKE key derivation Ingo Franzki 2024-09-23 11:17:47 +02:00
• 639a91bbf3 COMMON: Fix compile error due to incompatible pointer types Ingo Franzki 2024-09-16 09:16:03 +02:00
• 11a0b0a40b Bumping up to version-3.24 v3.24.0 Ingo Franzki 2024-08-20 09:51:53 +02:00
• eb46cec713 TRAVIS: Remove the use of travis-pls but use 'pv' instead Ingo Franzki 2024-08-27 08:46:15 +02:00
• 24f50a439a PKCSCONF: Avoid NULL pointer dereference Ingo Franzki 2024-08-28 11:01:21 +02:00
• 3b6004f22a P11SAK: Fix uninitialized variable warning Ingo Franzki 2024-08-28 10:54:07 +02:00
• e8f03fc435 P11SAK: Fix clang-tidy finding Ingo Franzki 2024-08-28 10:46:48 +02:00
• dc411e01cf COMMON: Avoid memory leak when strdup fails Ingo Franzki 2024-08-28 09:29:31 +02:00
• b8b5de56f5 EP11: make trace msg more informative Joerg Schmidbauer 2024-08-22 10:58:24 +02:00
• 0f936b830a TESTCASES: fix various typos Joerg Schmidbauer 2024-08-21 10:03:20 +02:00
• 17e26ea3a5 TRACE: Print the initial trace message for all trace levels Ingo Franzki 2024-08-27 11:28:48 +02:00
• 7ba19508a2 CI: Allow to set the trace level when running ock_tests Ingo Franzki 2024-08-27 11:24:58 +02:00
• e0b33ebeaa Fix code scanner findings Ingo Franzki 2024-08-15 11:03:13 +02:00
• 96dcaaf89d TEST: add CKA_IBM_PROTKEY_EXTRACTABLE=true to EC public keys Joerg Schmidbauer 2024-08-15 11:31:07 +02:00
• 249ae6d14f CCA: fix typo and formatting, no logic change Joerg Schmidbauer 2024-08-13 09:41:05 +02:00
• 556f8ec050 LGR support for PKEY: fix attribute handling in update_ep11_attrs_from_blob Joerg Schmidbauer 2024-08-12 17:55:44 +02:00
• 4b5b096789 LGR support for PKEY: add memcpy length checks for EC/Ed Joerg Schmidbauer 2024-08-08 10:15:15 +02:00
• c95dc21126 LGR support for PKEY: add memcpy length checks for ECB, CBC, and CMAC Joerg Schmidbauer 2024-08-07 12:45:33 +02:00
• 2bc73a1901 LGR support for PKEY: add length checks when copying XTS protkeys Joerg Schmidbauer 2024-08-07 12:26:52 +02:00
• 52630a19ab LGR support for PKEY: use convert_key routine for AES XTS Joerg Schmidbauer 2024-05-17 16:59:44 +02:00
• 5d196de9de LGR support for PKEY: use convert_key routine for EC/ED Joerg Schmidbauer 2024-05-17 10:40:21 +02:00
• 158ca2ea54 LGR support for PKEY: use convert_key routine for AES ECB/CBC/CMAC Joerg Schmidbauer 2024-05-17 10:23:31 +02:00
• 84b221e666 LGR support for PKEY: let low-level routines return unsigned int Joerg Schmidbauer 2024-05-21 17:23:00 +02:00
• b3777781f4 LGR support for PKEY: fix comments of low-level functions Joerg Schmidbauer 2024-05-21 17:10:44 +02:00
• 26c092ec4d LGR support for PKEY: handle LGR in ep11tok_pkey_update Joerg Schmidbauer 2024-07-29 10:57:04 +02:00
• a04fcfe5c2 LGR support for PKEY: introduce convert_key routine for EP11 Joerg Schmidbauer 2024-05-16 12:44:13 +02:00
• 47b0cc8d4b LGR support for PKEY: introduce PKEY lock for CCA Joerg Schmidbauer 2024-07-26 12:09:34 +02:00
• 2a02363e92 LGR support for PKEY: introduce convert_key routine for CCA Joerg Schmidbauer 2024-05-16 12:41:35 +02:00
• c84b1d5621 LGR support for PKEY: add tokdata and session to AES ECB/CBC/XTS pkey routines Joerg Schmidbauer 2024-05-16 13:21:04 +02:00
• c104658953 LGR support for PKEY: add tokdata and session to EC/ED pkey routines Joerg Schmidbauer 2024-05-16 13:09:35 +02:00
• 4526af51f2 LGR support for PKEY: add session to token_specific_aes_cmac interface Joerg Schmidbauer 2024-05-07 13:54:46 +02:00
• e8179e187e LGR support for PKEY: handle processed bytes internally in aes_xts_cipher Joerg Schmidbauer 2024-04-24 17:30:56 +02:00
• e8ef9abe12 LGR support for PKEY: fix return handling of s390_km Joerg Schmidbauer 2024-04-24 13:49:56 +02:00
• 9e6e20fc91 P11SAK: Add option to list-key command to show MKVPs Ingo Franzki 2024-08-08 17:39:28 +02:00
• 13834b22c9 P11SAK: Allow to identify the token type used Ingo Franzki 2024-08-08 12:55:58 +02:00
• d81b1ce1e5 AIX: Fix pkcsslotd garbage collector Ingo Franzki 2024-08-06 15:36:09 +02:00
• ffd3515e4f CI: Configure the test tokens to be owned by group 'tokgroup' Ingo Franzki 2024-07-22 11:55:49 +02:00
• 3831c72964 ICSF: Unify shm name and support multiple token instances Ingo Franzki 2024-07-09 11:54:42 +02:00
• 0a0d8d8ec5 PKCSTOK_ADMIN: Add 'reset' command to reset a token to its initial state Ingo Franzki 2024-07-03 10:55:39 +02:00
• f46d4bcb6f PKCSTOK_ADMIN: Add 'remove' command to remove a token directory Ingo Franzki 2024-07-03 10:34:56 +02:00
• e2a69f45ec PKCSTOK_ADMIN: Add 'chown' command to change the owner of a token directory Ingo Franzki 2024-07-03 09:50:01 +02:00
• a9a4810425 PKCSTOK_ADMIN: Add new tool to create a token directory with a specific owner Ingo Franzki 2024-07-02 15:34:09 +02:00
• 6f18014618 PKCSHSM_MK_CHANGE: Add warning about no permissions to use a token Ingo Franzki 2024-07-02 10:20:21 +02:00
• 28387f42ae PKCSTOK_MIGRATE: Support migrating a token with a user group set Ingo Franzki 2024-07-01 16:36:58 +02:00
• fe511af72f PKCSSLOTD/API/COMMON: Allow to configure a token user group Ingo Franzki 2024-07-01 13:19:10 +02:00
• 995018aea2 PKCSSLOTD: Separate setup of socket data and setup of socket server Ingo Franzki 2024-07-01 11:11:27 +02:00
• d4014a46ad TESTCASES: Add test for CKA_ALWAYS_AUTHENTICATE Ingo Franzki 2024-08-01 17:56:44 +02:00
• 258022052d COMMON/EP11: Handle CKA_ALWAYS_AUTHENTICATE on C_Login Ingo Franzki 2024-08-01 16:05:27 +02:00
• c3db1ccb02 COMMON/EP11: Handle CKA_ALWAYS_AUTHENTICATE on operation execution Ingo Franzki 2024-08-01 15:31:58 +02:00
• 69df71d9fc COMMON: Handle CKA_ALWAYS_AUTHENTICATE during operation init Ingo Franzki 2024-07-31 16:45:28 +02:00
• 0071e5bc8b P11SAK: Add support for CKA_ALWAYS_AUTHENTICATE Ingo Franzki 2024-07-31 15:42:32 +02:00
• 032e0bd508 COMMON: Allow CKA_ALWAYS_AUTHENTICATE to be set for private keys only Ingo Franzki 2024-07-31 15:20:11 +02:00
• e97a52bfd8 COMMON: Add defines for always-authenticate support Ingo Franzki 2024-07-31 15:13:33 +02:00
• b73d74187c ICSF: Temporarily disable SHA3-HMAC mechanisms Ingo Franzki 2024-07-29 16:48:23 +02:00
• 4f65d91f47 ICSF: Complete the support for SHA3-HMAC mechanisms Ingo Franzki 2024-07-29 15:29:33 +02:00