crypt/opencryptoki
1
0
Fork 0
mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-24 05:39:17 +03:00
Code Releases Activity
Files
bf8cf2fbaae7e86766858cd290f94de79e306723
opencryptoki/usr/lib/common
History
Ingo Franzki bf8cf2fbaa COMMON/PKCSCCA/PKCSTOK_MIGRATE: Prevent overflow when reading old token objects 
Check that the decrypted data is large enough to also hold the digest.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
2026-08-19 08:27:45 +02:00
..
aix
headers: Set up platform-specific headers
2024-04-24 09:48:07 +02:00
asn1.c
COMMON: Check for overflows in BER encoding functions
2026-08-19 08:27:19 +02:00
attributes.c
Fix invalid use of ock_err() function
2024-11-28 10:49:12 +01:00
attributes.h
Better validate attribute-array attributes
2021-03-16 17:37:41 +01:00
btree.c
common: More platform-aware changes
2024-04-24 09:48:07 +02:00
buffer.c
COMMON: Prevent integer overflow in p11_buffer_append_len()
2026-08-19 08:27:05 +02:00
buffer.h
lib: common: add buffer
2022-08-03 08:26:28 +02:00
cert.c
common: Correctly set default attributes for certificates
2023-05-22 11:28:46 +02:00
common.mk
aix: Add missing code that is AIX-specific
2024-04-24 09:48:07 +02:00
constant_time.h
common: Make rsa_parse_block() constant time for format 2
2023-05-04 16:26:48 +02:00
data_obj.c
COMMON: Fix coverty findings - unused variable assignment
2023-09-12 08:17:37 +02:00
decr_mgr.c
COMMON: Fix AES-CTR mechanism parameter checking
2026-08-19 08:27:18 +02:00
defs.h
COMMON/TPM: Remove use of system() to remove files
2026-08-19 08:27:05 +02:00
dig_mgr.c
COMMON: Add internal support for SHAKE mechanisms
2026-04-13 14:39:43 +02:00
dlist.c
Externalize linked list functions
2021-04-30 17:07:41 +02:00
dlist.h
Externalize linked list functions
2021-04-30 17:07:41 +02:00
dp_obj.c
More precise checking for existence of required attributes
2021-03-16 17:37:41 +01:00
ec_curve_translation.c
EP11: Generate Key, Sign and Verify support for BLS 12 381 curve
2025-10-29 14:27:12 +01:00
ec_defs.h
COMMON: Add support for Edwards and Montgomery key types and mechanisms
2026-01-27 08:14:16 +01:00
ec_supported.c
COMMON: Fix curve information for the BLS12-381 curve
2026-07-22 13:17:14 +02:00
encr_mgr.c
COMMON: Fix AES-CTR mechanism parameter checking
2026-08-19 08:27:18 +02:00
event_client.c
Make pkcsslotd user and pkcs11 group configurable
2023-04-20 15:13:44 +02:00
event_client.h
c99 fixes: strict prototypes and old-style definitions
2022-11-11 10:33:15 +01:00
globals.c
COMMON: Add SHA3 mechanisms to digest_mgr, sign_mgr and verify_mgr
2024-06-10 13:42:10 +02:00
h_extern.h
COMMON: Restrict token name and config name to allowed characters
2026-08-19 08:27:41 +02:00
host_defs.h
COMMON: Fix double add and integer overflow in find_build_list_cb()
2026-08-19 08:27:05 +02:00
hwf_obj.c
More precise checking for existence of required attributes
2021-03-16 17:37:41 +01:00
kdf_translation.c
COMMON: Add support for *_SP800 KDFs for ECDH
2024-06-10 13:42:10 +02:00
key_mgr.c
COMMON: CKM_PUB_KEY_FROM_PRIV_KEY should ignore CKA_DERIVE
2026-06-22 15:22:22 +02:00
key.c
COMMON: Add support for CKM_PUB_KEY_FROM_PRIV_KEY in common code
2026-04-22 13:07:43 +02:00
list.h
Support multiple instances of ICSF token
2020-04-03 13:22:06 +02:00
loadsave.c
COMMON/PKCSCCA/PKCSTOK_MIGRATE: Prevent overflow when reading old token objects
2026-08-19 08:27:45 +02:00
mech_aes.c
COMMON: Fix AES-CTR mechanism parameter checking
2026-08-19 08:27:18 +02:00
mech_des3.c
COMMON: Check input length for CBC pad and AES-KWP encrypt functions
2026-08-19 08:27:06 +02:00
mech_des.c
COMMON: Check input length for CBC pad and AES-KWP encrypt functions
2026-08-19 08:27:06 +02:00
mech_dh.c
COMMON: Cleanse sensitive keys when no longer used in mech functions
2026-08-19 08:27:16 +02:00
mech_dsa.c
Fix trace messages
2020-11-24 09:43:57 +01:00
mech_ec.c
COMMON: Check EC prime len calculations
2026-08-19 08:27:09 +02:00
mech_list.c
COMMON: Fix mechlist handling if policy rejects all mechanisms
2026-08-19 08:27:04 +02:00
mech_md2.c
common: Build without support for MD2 by default
2022-08-24 09:27:13 +02:00
mech_md5.c
common: Replace own MD5-HMAC implementation with OpenSSL
2022-08-24 09:27:13 +02:00
mech_openssl.c
COMMON: Cleanse sensitive BIGNUMs in mech_openssl.c
2026-08-19 08:27:22 +02:00
mech_pqc.c
COMMON: Add support for ML-KEM en/decapsulate mechanism of PKCS#11 v3.2
2026-04-13 14:39:43 +02:00
mech_rng.c
COMMON: Fix errors reported by covscan
2024-06-14 10:36:35 +02:00
mech_rsa.c
COMMON: Fix signed/unsigned mismatch in encode_eme_oaep()
2026-08-19 08:27:22 +02:00
mech_sha.c
COMMON: Add internal support for SHAKE mechanisms
2026-04-13 14:39:43 +02:00
mech_ssl3.c
COMMON: Cleanse sensitive keys when no longer used in mech functions
2026-08-19 08:27:16 +02:00
mgf_translation.c
COMMON: Add SHA3 mechanisms to mechtable, policy, statistics, utilities
2024-06-10 13:42:10 +02:00
new_host.c
COMMON: Restrict token name and config name to allowed characters
2026-08-19 08:27:41 +02:00
obj_mgr.c
COMMON: Fix double add and integer overflow in find_build_list_cb()
2026-08-19 08:27:05 +02:00
object.c
TESTS: Add unit and fuzzing tests for object flatten and unflatten in object.c
2026-05-28 10:41:26 +02:00
ock_syslog.h
Autotools rework: get rid of recursive make
2018-10-08 10:48:42 +02:00
p11util.c
COMMON: Add length check in p11_ahex_dump to avoid overflow
2026-08-19 08:27:05 +02:00
p11util.h
lib: common: add strlen helper
2022-08-03 08:26:28 +02:00
pin_prompt.c
common: More platform-aware changes
2024-04-24 09:48:07 +02:00
pin_prompt.h
lib: common: add common pin prompt tooling
2022-09-20 11:18:59 +02:00
pkcs_utils.c
PKCSICSF/ICSF: Restrict token name to allowed characters
2026-08-19 08:27:33 +02:00
pkcs_utils.h
PKCSICSF/ICSF: Restrict token name to allowed characters
2026-08-19 08:27:33 +02:00
pkey_utils.c
COMMON: Cleanse protected keys on stack/heap when no longer used
2026-08-19 08:27:15 +02:00
pkey_utils.h
COMMON: Add support for Edwards and Montgomery key types and mechanisms
2026-01-27 08:14:16 +01:00
platform.h
COMMON/PKCSTOK_ADMIN/PKCSTOK_MIGRATE: Prevent symlink-following for directories
2026-08-19 08:27:14 +02:00
pqc_defs.h
CCA: Fix required cipher text length for ML-KEM
2026-06-22 15:22:57 +02:00
pqc_supported.c
CCA: Fix required cipher text length for ML-KEM
2026-06-22 15:22:57 +02:00
profile_obj.c
Add template_update_attribute error checking
2020-11-24 09:43:57 +01:00
sess_mgr.c
COMMON: Implement C_VerifySignature[Init/Update/Final] functions
2026-04-13 14:39:43 +02:00
shared_memory.c
COMMON: Optimize token shared memory segment size
2025-11-27 10:46:11 +01:00
shared_memory.h
PKCSSLOTD/API/COMMON: Allow to configure a token user group
2024-08-12 14:46:21 +02:00
sign_mgr.c
COMMON: Add support for ML-DSA sign mechanisms of PKCS#11 v3.2
2026-04-13 14:39:43 +02:00
stringtranslations.h
COMMON: String translations
2021-11-08 16:29:24 +01:00
sw_crypt.c
COMMON: sw_crypt.c: Remove support for OpenSSL < v1.1.1
2021-07-30 12:32:57 +02:00
sw_crypt.h
Autotools rework: get rid of recursive make
2018-10-08 10:48:42 +02:00
template.c
TESTS: Add unit and fuzzing tests for object flatten and unflatten in object.c
2026-05-28 10:41:26 +02:00
tok_spec_struct.h
COMMON: Add support for ML-KEM en/decapsulate mechanism of PKCS#11 v3.2
2026-04-13 14:39:43 +02:00
tok_specific.h
COMMON: Add support for ML-KEM en/decapsulate mechanism of PKCS#11 v3.2
2026-04-13 14:39:43 +02:00
trace.c
COMMON: Prevent symlink-following attacks with trace files
2026-08-19 08:27:10 +02:00
trace.h
COMMON: Add base support for PKCS#11 v3.2
2026-04-13 14:39:43 +02:00
uri_enc.h
lib: common: add pkcs11 uri
2022-08-03 08:26:28 +02:00
uri.c
URI: Add support for pin-value and pin-source in PKCS#11 URI
2024-04-15 09:16:51 +02:00
uri.h
URI: Add support for pin-value and pin-source in PKCS#11 URI
2024-04-15 09:16:51 +02:00
utility_common.c
COMMON: Add support for ML-DSA sign mechanisms of PKCS#11 v3.2
2026-04-13 14:39:43 +02:00
utility.c
COMMON: Restrict token name and config name to allowed characters
2026-08-19 08:27:41 +02:00
verify_mgr.c
COMMON: Add support for ML-DSA sign mechanisms of PKCS#11 v3.2
2026-04-13 14:39:43 +02:00