summaryrefslogtreecommitdiff
path: root/usr/src/uts/common/sys/crypto
AgeCommit message (Collapse)AuthorFilesLines
2022-08-3014079 remove TNFToomas Soome1-1/+0
Reviewed by: Gordon Ross <gordon.w.ross@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Garrett D'Amore <garrett@damore.org>
2022-01-0614353 crypto_mech2id should take unlimited string argumentToomas Soome1-1/+1
Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-11-305869 Need AES CMAC support in KCF+PKCS11Matt Barden4-2/+15
Portions contributed by: Jason King <jason.king@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gwr@nexenta.com>
2016-12-226239 Add PKCS#11 v2.40 supportJason King3-40/+40
6240 pkcs11_mech2keytype returns incorrect key type for CKM_DH_PKCS_PARAMETER_GEN Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacci <rm@joyent.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2015-09-164185 add new cryptographic checksums to ZFS: SHA-512, Skein, Edon-RMatthew Ahrens1-0/+5
Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Prakash Surya <prakash.surya@delphix.com> Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Garrett D'Amore <garrett@damore.org>
2014-08-125045 use atomic_{inc,dec}_* instead of atomic_add_*Josef 'Jeff' Sipek2-8/+8
Reviewed by: Matthew Ahrens <mahrens@delphix.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Robert Mustacchi <rm@joyent.com>
2012-12-28995 boot message: No randomness provider enabled for /dev/randomGordon Ross1-1/+0
Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Hans Rosenfeld <hans.rosenfeld@nexenta.com> Reviewed by: Boris Protopopov <boris.protopopov@nexenta.com> Approved by: Garrett D'Amore <garrett@damore.org>
2010-09-126 Need open kcfdGarrett D'Amore3-58/+10
Reviewed by: gwr@nexenta.com, richlowe@richlowe.net, matt@greenviolet.net Approved by: richlowe@richlowe.net
2010-07-196948723 Crypto to pkcs11 error mapping has wrong boundary checksZdenek Kotala1-2/+6
6936557 kernel_get_func_list does not set fl_verify* flags 6949122 return is missing in aes_check_mech_param in aes crypto module
2010-06-10PSARC 2010/191 Private Crypto Framework header filesDarren J Moffat1-7/+0
6956768 private crypto framework headers need packaging up
2010-05-04PSARC/2010/146 EOF unnecessary elfsign and kCF optionsValerie Bubb Fenwick4-20/+8
6855881 clean up unnecessary technology from elfsign and kcf
2010-01-016719591 non-exploitable integer wraparound issue in copyin_key() [external ↵Dan OpenSolaris Anderson1-3/+5
report]
2009-12-186900477 libpkcs11 needs to be friendlierValerie Bubb Fenwick1-1/+3
6903648 pInfo->libraryVersion.minor left uninitialized in pkcs11_softtoken
2009-12-11FWARC 2008/613 KT IOS Performance Counters APIJanie Lu4-9/+21
FWARC 2008/615 KT Perf Reg HV API FWARC 2009/434 KT IOS Performance Counters API Update FWARC 2009/567 Parallel Boot HV APIs PSARC 2009/177 Solaris support for Rainbow Falls platforms PSARC 2009/389 Sun4v faulted SP events extension PSARC 2009/533 CRYPTO_HMAC_NO_UPDATE - A new KCF SPI flag PSARC 2009/605 more sun4v platform-independent cpu/mem FMA events PSARC 2009/649 Generic PCIe root complex FMA events 6704999 extend xaui enum to work in platform independent world 6773223 RFE: guest epkt for faulted SP 6773225 RFE: Diagnosis of a faulted SP 6797776 Solaris support for Rainbow Falls platforms
2009-11-106579499 update operations should be able to use in-place transformationsDan OpenSolaris Anderson1-1/+5
2009-10-07PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-2Anthony Scarpino6-5/+46
6703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance
2009-09-11PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 modeHai-May Chao2-6/+29
6787364 Administration and policy configuration changes to support FIPS 140-2 6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance
2009-09-026786946 kcf should check the key sizes before passing a job to a providerVladimir Kotal2-8/+9
6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths
2009-07-236861521 panic in kcf when calling kcf_free_provider_descKrishna Yenduri1-1/+0
2009-05-126836582 kcf_limit_hwrng tunable can be removedKrishna Yenduri1-1/+1
2009-04-294781345 me_mutex lock in kcf_mech_entry_t can be broken upKrishna Yenduri2-68/+99
6771819 Use of atomic increment in KCF causes scaling problems on multi-socket T2 systems 6705174 C_EncryptInit scaling issues on T2plus 6813873 assertion failed: (prov_desc)->pd_refcnt != 0, file: ../../common/crypto/core/kcf_prov_tabs.c, line
2009-04-106803836 Solaris Cryptographic Framework needs to support AES GMACMark Powers1-0/+15
2009-03-196812615 64-bit RC4 has poor performance on Intel NehalemDan OpenSolaris Anderson1-5/+6
2009-02-276803803 rnd_chpoll() should not reject (EINVAL) events==0Krishna Yenduri1-2/+2
2009-01-156773928 n2cp should support CKM_AES_GCMMark Powers1-2/+3
2008-12-166784161 Add a KCF SPI flag to reduce the latency when using providers like n2cpKrishna Yenduri1-3/+5
6769788 crypto_register_provider() returns an incorrect error code when mechanism table is full
2008-12-08PSARC 2007/001 lofi(7d) crypto supportDina K Nimeh2-8/+58
4926125 lofi(7d) should support encrypted block devices 6236948 need userland interface to list crypto algorithms available to kernel consumers
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM1-4/+2
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-046260053 Solaris Cryptographic Framework needs to support AES in GCM modeMark Powers1-2/+21
2008-10-206722032 symmetric crypto scalability issues on batokaKrishna Yenduri2-15/+41
2008-08-04backout 6449514/6686002/6686004/6700122: needs more worksuha1-2/+2
2008-08-016449514 move OpenSSL from /usr/sfw to /usr, /libjohnz1-2/+2
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-07-246559619 Enhance n2cp to support CCM modemcpowers2-0/+40
6637487 put algorithm mode code and other common code into kcf module 6648214 need CKM_AES_CTR for softtoken --HG-- rename : usr/src/common/crypto/aes/aes_cbc_crypt.c => deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.c rename : usr/src/common/crypto/aes/aes_cbc_crypt.h => deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.h rename : usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c => deleted_files/usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c rename : usr/src/common/crypto/blowfish/blowfish_cbc_crypt.h => deleted_files/usr/src/common/crypto/blowfish/blowfish_cbc_crypt.h rename : usr/src/common/crypto/des/des_cbc_crypt.c => deleted_files/usr/src/common/crypto/des/des_cbc_crypt.c rename : usr/src/common/crypto/des/des_cbc_crypt.h => deleted_files/usr/src/common/crypto/des/des_cbc_crypt.h
2008-04-116604363 Bulk encryption and digest algorithms have poor scalability on ↵krishna1-1/+2
T5140/T5240
2008-03-256652716 Need an ARCFOUR implementation optimized for Intel EM64Tda730241-6/+5
6658907 digest(1) and mac(1) could benefit from being 64-bit programs 6665607 Need a SHA256/SHA384/SHA512 implementation optimized for 64-bit x86 --HG-- rename : usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s => deleted_files/usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s
2008-01-116474964 cryptoadm(1M) displays duplicate mechanisms for hardware providersmcpowers1-0/+2
6545665 make CKM_AES_CTR available to non-kernel users
2008-01-035072961 Need an optimized MD5 implementation for amd64da730241-4/+9
6189743 Need an ARCFOUR implementation optimized for AMD64 6617458 amd64/rsa is a false positive reported by wsdiff
2007-12-14PSARC 2007/446 Elliptic-Curve Cryptography for Solarismcpowers1-1/+21
5066901 Offer the PKCS#11 Elliptic Curve based mechanisms in Solaris 6562402 kernel software provider for Elliptic Curve mechanisms
2007-10-156558449 Add ECC support to NCPfr412791-0/+23
2007-10-056592898 open elfsign, libelfsignjohnz1-81/+0
2007-10-01backout 6558449: breaks builddm1207691-21/+0
2007-10-016558449 Add ECC support to NCPfr412791-0/+21
2007-09-176560793 crypto modules should not use SCCS keywords in user-visible stringsmcpowers1-0/+38
6598279 AES provider has incorrect definition for CK_AES_CTR_PARAMS 6601271 C_Verify() must pass CKA_EC_PARAMS to HW providers 6603350 CK_*_PARAMS definitions should be in <sys/crypto/common.h>
2007-08-096482533 Threshold for HW offload via PKCS11 interfacehaimay1-0/+19
2007-07-116534628 /dev/crypto can use in-place when calling crypto_encrypt APImcpowers1-0/+7
2007-06-196568352 IPsec performance does not scale using hardware crypto providerskrishna2-5/+22
2007-06-18PSARC/2007/266 AES CCM for kernel crypto frameworkktung1-0/+1
6550326 Support AES CCM mode in KCF
2007-06-016548905 ncp crypto registration during attach deadlocks in devfs during bootkrishna2-1/+4
2007-05-13PSARC 2007/092 key generation and derivation for providers without keystoremcpowers4-1/+177
6462782 Metaslot needs to generate a token object from a session object. 6462780 Softtoken keystore needs to store keys ECC objects 6339802 support keygen operations by acceleration only providers
2007-05-086543235 elfsign behaves badly with unexpected inputsjohnz1-1/+2