Ingo Franzki 0c4574cd0a CCA: Handle CCA return code 8 / 2149 for ECDH ...

CCA return code 8 / 2149 means "The key to be generated is stronger than
the input material.". Translate this into CKR_KEY_SIZE_RANGE.

This can occur when the NIST security strength requirements are enforced
by CCA, regarding ECC curve type (input) and derived key-length.

Fixes: a40e798c35

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>

2026-05-13 13:18:08 +02:00

..

api

COMMON: Add CKM_PUB_KEY_FROM_PRIV_KEY to pkcs11types.h, policy and mechtable

2026-04-22 13:07:43 +02:00

cca_stdll

CCA: Handle CCA return code 8 / 2149 for ECDH

2026-05-13 13:18:08 +02:00

common

COMMON: Fix possible out-of-bounds read in attribute_array_unflatten()

2026-04-24 13:33:12 +02:00

config

COMMON: Fix use after free warnings

2024-11-11 09:36:47 +01:00

ep11_stdll

SOFT/ICA/CCA/EP11: Enable CKM_PUB_KEY_FROM_PRIV_KEY mechanism

2026-04-22 13:07:43 +02:00

hsm_mk_change

Fix symlink-following vulnerabilities (CWE-59)

2026-01-19 10:53:42 +01:00

ica_s390_stdll

SOFT/ICA/CCA/EP11: Enable CKM_PUB_KEY_FROM_PRIV_KEY mechanism

2026-04-22 13:07:43 +02:00

icsf_stdll

COMMON: Add support for ML-KEM en/decapsulate mechanism of PKCS#11 v3.2

2026-04-13 14:39:43 +02:00

soft_stdll

SOFT/ICA/CCA/EP11: Enable CKM_PUB_KEY_FROM_PRIV_KEY mechanism

2026-04-22 13:07:43 +02:00

tpm_stdll

COMMON: Add support for ML-KEM en/decapsulate mechanism of PKCS#11 v3.2

2026-04-13 14:39:43 +02:00

lib.mk

hsm_mk_change: Add utilities for managing MK change operations

2023-03-14 10:19:10 +01:00