opencryptoki

mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-24 05:39:17 +03:00

Files

Ingo Franzki 73d27be1ac ICSF: Fix Output buffer size check for CBC-PAD decryption

For CBC-PAD the output buffer size sent to ICSF was inflated to at least
cipher_text_len so the server does not send back RSN_TOO_SHORT for the
padded-then-unpadded output. Validate length against the inflated clear_len
(what we told the server) and bv_clear_data.bv_len against the caller's
real buffer. When the real buffer is too small for the unpadded result,
propagate CKR_BUFFER_TOO_SMALL so the caller can retry.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>

2026-10-22 12:53:13 +02:00

icsf_config.h

icsf: use generic config parser

2021-11-11 16:37:59 +01:00

icsf_specific.c

ICSF: Correct key sizes and flags in the mechanism table

2026-10-08 12:38:18 +02:00

icsf_specific.h

ICSF: Remove global slot_data variable

2026-08-19 08:28:01 +02:00

icsf_stdll.mk

ICSF: Introduce a FIPS-compliant token data store format