Age | Commit message (Collapse) | Author | Files | Lines |
|
Reviewed by: garrett@nexenta.com, gordon.w.ross@gmail.com
Approved by: richlowe@richlowe.net
|
|
Reviewed by: gwr@nexenta.com, richlowe@richlowe.net, matt@greenviolet.net
Approved by: richlowe@richlowe.net
|
|
|
|
for FIPS 140-2 compliance
|
|
|
|
|
|
6816864 collect together padding methods used by PKCS#11
6917508 bignum library needs big random number function
6249983 softtoken based RSA/DSA slow on Niagara
6917506 arcfour lint check missing from usr/src/uts/sun4v/Makefile
6917513 move softFipsDSAUtil.c to common/crypto/fips/fips_dsa_util.c
6834849 dsa_sign() produces invalid signature when pkcs11 engine is used via openssl(1) for certain keys
|
|
6848439 pkcs11_ObjectToKey() arg checks too strict & could be more informative
6739850 CCM fails to update data_processed_len after decrypting remainder
|
|
single AES block.
|
|
report]
|
|
%xmm* registers
|
|
6647055 x86_64 MD5/SHA1 assembly source should use 32-bit registers when the assembler supports it
|
|
6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled
|
|
|
|
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance
|
|
6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths
|
|
for RSA keys
6820888 CKA_MODULUS_BITS attribute is sometimes missing in pkcs11_softtoken
|
|
|
|
6747587 Remove redundant code in ccm.c
--HG--
rename : usr/src/common/crypto/aes/amd64/THIRDPARTYLICENSE => usr/src/common/crypto/aes/amd64/THIRDPARTYLICENSE.gladman
rename : usr/src/common/crypto/aes/amd64/THIRDPARTYLICENSE.descrip => usr/src/common/crypto/aes/amd64/THIRDPARTYLICENSE.gladman.descrip
|
|
|
|
6722460 finish moving /dev/random and /dev/urandom seeding and usage to libcryptoutil
|
|
|
|
|
|
|
|
|
|
4911870 pkcs11_softtoken crypto should be factored out into a new library to support $PLATFORM & $HWCAP
|
|
|
|
|
|
|
|
iovec_t.
|
|
(fix lint)
|
|
6717509 Need to use bswap/bswapq for byte swap of 64-bit integer on x32/x64
PSARC 2008/474 Add 64-bit htonll() and ntohll() byte order conversion functions
|
|
|
|
6637487 put algorithm mode code and other common code into kcf module
6648214 need CKM_AES_CTR for softtoken
--HG--
rename : usr/src/common/crypto/aes/aes_cbc_crypt.c => deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.c
rename : usr/src/common/crypto/aes/aes_cbc_crypt.h => deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.h
rename : usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c => deleted_files/usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c
rename : usr/src/common/crypto/blowfish/blowfish_cbc_crypt.h => deleted_files/usr/src/common/crypto/blowfish/blowfish_cbc_crypt.h
rename : usr/src/common/crypto/des/des_cbc_crypt.c => deleted_files/usr/src/common/crypto/des/des_cbc_crypt.c
rename : usr/src/common/crypto/des/des_cbc_crypt.h => deleted_files/usr/src/common/crypto/des/des_cbc_crypt.h
|
|
6699938 CCM max payload computation is off by one
6704653 THIRDPARTYLICENSE fixes for open source crypto source
--HG--
rename : usr/src/common/crypto/arcfour/amd64/THIRDPARTYLICENSE => deleted_files/usr/src/common/crypto/arcfour/amd64/THIRDPARTYLICENSE
rename : usr/src/common/crypto/arcfour/amd64/THIRDPARTYLICENSE.descrip => deleted_files/usr/src/common/crypto/arcfour/amd64/THIRDPARTYLICENSE.descrip
rename : usr/src/common/crypto/sha1/amd64/THIRDPARTYLICENSE => deleted_files/usr/src/common/crypto/sha1/amd64/THIRDPARTYLICENSE
rename : usr/src/common/crypto/sha1/amd64/THIRDPARTYLICENSE.descrip => deleted_files/usr/src/common/crypto/sha1/amd64/THIRDPARTYLICENSE.descrip
rename : usr/src/common/crypto/sha2/amd64/THIRDPARTYLICENSE => deleted_files/usr/src/common/crypto/sha2/amd64/THIRDPARTYLICENSE
rename : usr/src/common/crypto/sha2/amd64/THIRDPARTYLICENSE.descrip => deleted_files/usr/src/common/crypto/sha2/amd64/THIRDPARTYLICENSE.descrip
|
|
|
|
--HG--
rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile
rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s
rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32
rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
|
|
6658907 digest(1) and mac(1) could benefit from being 64-bit programs
6665607 Need a SHA256/SHA384/SHA512 implementation optimized for 64-bit x86
--HG--
rename : usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s => deleted_files/usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s
|
|
--HG--
rename : usr/src/common/crypto/sha1/amd64/THIRDPARTYLICENSE.descript => usr/src/common/crypto/sha1/amd64/THIRDPARTYLICENSE.descrip
|
|
|
|
6498066 PSARC/2006/610 Data Encryption Kit (SUNWcry) Removal
--HG--
rename : usr/src/common/openssl/crypto/sunw.c => deleted_files/usr/src/common/openssl/crypto/sunw.c
rename : usr/src/lib/openssl/libcrypto/common/mapfile => deleted_files/usr/src/lib/openssl/libcrypto/common/mapfile
rename : usr/src/lib/openssl/libcrypto_extra/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/Makefile.com => deleted_files/usr/src/lib/openssl/libcrypto_extra/Makefile.com
rename : usr/src/lib/openssl/libcrypto_extra/amd64/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/amd64/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/i386/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/i386/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/sparc/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/sparc/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/sparcv9/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/sparcv9/Makefile
rename : usr/src/lib/openssl/libssl_extra/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/Makefile
rename : usr/src/lib/openssl/libssl_extra/Makefile.com => deleted_files/usr/src/lib/openssl/libssl_extra/Makefile.com
rename : usr/src/lib/openssl/libssl_extra/amd64/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/amd64/Makefile
rename : usr/src/lib/openssl/libssl_extra/i386/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/i386/Makefile
rename : usr/src/lib/openssl/libssl_extra/sparc/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/sparc/Makefile
rename : usr/src/lib/openssl/libssl_extra/sparcv9/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/sparcv9/Makefile
rename : usr/src/lib/pkcs11/Makefile.softtoken.amd64 => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.amd64
rename : usr/src/lib/pkcs11/Makefile.softtoken.com => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.com
rename : usr/src/lib/pkcs11/Makefile.softtoken.i386 => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.i386
rename : usr/src/lib/pkcs11/README.Makefiles => deleted_files/usr/src/lib/pkcs11/README.Makefiles
rename : usr/src/lib/pkcs11/Makefile.softtoken.sparc => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken/Makefile.softtoken.sparc.1
rename : usr/src/lib/pkcs11/Makefile.softtoken.sparcv9 => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken/Makefile.softtoken.sparcv9.1
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile.com => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile.com
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/amd64/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/amd64/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/i386/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/i386/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparc/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparc/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparcv9/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparcv9/Makefile
rename : usr/src/pkgdefs/SUNWcry/Makefile => deleted_files/usr/src/pkgdefs/SUNWcry/Makefile
rename : usr/src/pkgdefs/SUNWcry/pkginfo.tmpl => deleted_files/usr/src/pkgdefs/SUNWcry/pkginfo.tmpl
rename : usr/src/pkgdefs/SUNWcry/postinstall => deleted_files/usr/src/pkgdefs/SUNWcry/postinstall
rename : usr/src/pkgdefs/SUNWcry/preremove => deleted_files/usr/src/pkgdefs/SUNWcry/preremove
rename : usr/src/pkgdefs/SUNWcry/prototype_com => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_com
rename : usr/src/pkgdefs/SUNWcry/prototype_i386 => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_i386
rename : usr/src/pkgdefs/SUNWcry/prototype_sparc => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_sparc
rename : usr/src/pkgdefs/SUNWcryr/Makefile => deleted_files/usr/src/pkgdefs/SUNWcryr/Makefile
rename : usr/src/pkgdefs/SUNWcryr/pkginfo.tmpl => deleted_files/usr/src/pkgdefs/SUNWcryr/pkginfo.tmpl
rename : usr/src/pkgdefs/SUNWcryr/postinstall => deleted_files/usr/src/pkgdefs/SUNWcryr/postinstall
rename : usr/src/pkgdefs/SUNWcryr/preremove => deleted_files/usr/src/pkgdefs/SUNWcryr/preremove
rename : usr/src/pkgdefs/SUNWcryr/prototype_com => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_com
rename : usr/src/pkgdefs/SUNWcryr/prototype_i386 => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_i386
rename : usr/src/pkgdefs/SUNWcryr/prototype_sparc => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_sparc
rename : usr/src/uts/sparc/aes256/Makefile => deleted_files/usr/src/uts/sparc/aes256/Makefile
rename : usr/src/uts/sparc/arcfour2048/Makefile => deleted_files/usr/src/uts/sparc/arcfour2048/Makefile
rename : usr/src/uts/sparc/blowfish448/Makefile => deleted_files/usr/src/uts/sparc/blowfish448/Makefile
rename : usr/src/uts/sun4u/aes256/Makefile => deleted_files/usr/src/uts/sun4u/aes256/Makefile
|
|
issue)
|
|
6189743 Need an ARCFOUR implementation optimized for AMD64
6617458 amd64/rsa is a false positive reported by wsdiff
|
|
--HG--
rename : usr/src/common/crypto/ecc/ec2_proj.c => deleted_files/usr/src/common/crypto/ecc/ec2_proj.c
|
|
5066901 Offer the PKCS#11 Elliptic Curve based mechanisms in Solaris
6562402 kernel software provider for Elliptic Curve mechanisms
|
|
6598279 AES provider has incorrect definition for CK_AES_CTR_PARAMS
6601271 C_Verify() must pass CKA_EC_PARAMS to HW providers
6603350 CK_*_PARAMS definitions should be in <sys/crypto/common.h>
|
|
|
|
6550326 Support AES CCM mode in KCF
|
|
6354305 Kernel Crypto support for MD4
6533491 libmd's MD4 produces invalid message digests in 64-bit mode
6539262 MD4/MD5/SHA1/SHA2 Final functions not consistent
|
|
6494834 support check for threshold when using hardware providers even for multi-part requests
|