summaryrefslogtreecommitdiff
path: root/usr/src/lib/pkcs11/pkcs11_softtoken/common
AgeCommit message (Collapse)AuthorFilesLines
2020-11-0613196 C_DeriveKey() doesn't always set object handle valueJason King1-2/+24
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-07-1012942 pkcs11_softtoken pbkdf2 key derivation can crashJason King1-10/+3
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-07-0612856 pkcs11_softtoken should validate session and object handlesJason King10-153/+271
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-06-1512796 pcks11_softtoken C_GetMechanismList() should validate its argumentsJason King1-1/+4
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Sebastian Wiedenroth <wiedi@frubar.net> Reviewed by: Juraj Lutter <juraj@lutter.sk> Approved by: Dan McDonald <danmcd@joyent.com>
2020-01-2111966 CTR mode tries to be both a stream and block cipher and fails at bothJason King1-41/+53
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2019-11-1211825 PKCS#11 CKM_AES_CBC_PAD decryption can failJason King1-191/+624
Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2019-10-0311265 Add support for SHA512_224 and SHA512_256 to KCF and PKCS#11Jason King3-17/+54
Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2019-06-2511153 pkcs11_softtoken: NULL pointer errorsToomas Soome1-1/+1
Reviewed by: Jason Lippert <jason@glasspelican.ca> Approved by: Dan McDonald <danmcd@joyent.com>
2018-12-201228 Add CCM and GCM mode support to AES in pkcs11_softtokenJason King9-1395/+985
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-08-079698 pkcs11 C_Digest() is too restrictive in inputJason King1-1/+2
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Yuri Pankov <yuripv@yuripv.net> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Matt Barden <matt.barden@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-08-019642 PKCS#11 softtoken should use explicit_bzeroJason King15-447/+386
Reviewed by: Yuri Pankov <yuripv@yuripv.net> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Ken Mays <kmays2000@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-11-305869 Need AES CMAC support in KCF+PKCS11Matt Barden6-32/+474
Portions contributed by: Jason King <jason.king@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gwr@nexenta.com>
2016-12-226239 Add PKCS#11 v2.40 supportJason King1-1/+1
6240 pkcs11_mech2keytype returns incorrect key type for CKM_DH_PKCS_PARAMETER_GEN Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacci <rm@joyent.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2014-06-061667 pkcs11 may deadlock when multi-threaded consumers forkDan McDonald1-3/+8
Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com> Approved by: Gordon Ross <gordon.ross@nexenta.com>
2013-07-293882 Remove xmod & friendsJosef 'Jeff' Sipek2-55/+0
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2012-02-182077 lots of unreachable breaks in illumos gateMilan Jurik2-8/+2
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2010-10-09289 invalid padding when using java pkcs11 providerJason King1-2/+2
Reviewed by: garrett@nexenta.com, gordon.w.ross@gmail.com Approved by: richlowe@richlowe.net
2010-09-126 Need open kcfdGarrett D'Amore5-379/+0
Reviewed by: gwr@nexenta.com, richlowe@richlowe.net, matt@greenviolet.net Approved by: richlowe@richlowe.net
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami1-3/+4
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-076875651 move asymmetric crypto to libsoftcryptoDina K Nimeh23-2012/+371
6816864 collect together padding methods used by PKCS#11 6917508 bignum library needs big random number function 6249983 softtoken based RSA/DSA slow on Niagara 6917506 arcfour lint check missing from usr/src/uts/sun4v/Makefile 6917513 move softFipsDSAUtil.c to common/crypto/fips/fips_dsa_util.c 6834849 dsa_sign() produces invalid signature when pkcs11 engine is used via openssl(1) for certain keys
2010-05-286949306 soft_slot.authenticated not getting properly set anymore, confusing ↵Peter Shoults2-2/+16
C_Logout & friends 6953950 $s and %s look similar, but $s breaks keystore creation
2010-04-266443649 softtoken should honor $HOME, avoid getpwuidPeter Shoults5-100/+72
6884140 softtoken touches $HOME too soon
2010-01-256918510 softtoken does not save EC key data correctlyWyllys Ingersoll1-2/+58
2010-01-076905996 arcfour should return failure on invalid key (instead of dumping core)Zdenek Kotala1-7/+10
2009-12-186900477 libpkcs11 needs to be friendlierValerie Bubb Fenwick1-1/+1
6903648 pInfo->libraryVersion.minor left uninitialized in pkcs11_softtoken
2009-11-056897371 cryptoadm needs changes in order to support fips-140 mode in local zonesHai-May Chao1-1/+7
6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled
2009-09-11PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 modeHai-May Chao7-0/+967
6787364 Administration and policy configuration changes to support FIPS 140-2 6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance
2009-09-026786946 kcf should check the key sizes before passing a job to a providerVladimir Kotal2-1/+17
6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths
2009-08-286842872 Race condition in fork() and C_Initialize() causes deadlock in pkcs11Zdenek Kotala4-63/+78
6862268 C_Initialize() does not correctly cleans resources when fails 6862202 token_session mutexes are not covered by at_fork handler 6862207 PKCS11 softtoken:C_Initialize() sets softtoken_initialized to TRUE also when it fails
2009-08-106859220 pkcs11_softoken.so crashes in RC4 when doing a java benchmarkZdenek Kotala1-4/+5
2009-06-096837738 ssh and javaws dump core in libsoftcrypto when freeing memory under ↵Dina K Nimeh1-28/+27
libumem
2009-05-196823591 pkcs11_kernel and pkcs11_softtoken object session reference counter ↵Zdenek Kotala9-49/+85
must to be handled after fork 6828366 pkcs11_kernel/softtoken atfork handler should acquire session objects mutex too
2009-05-046820466 CKA_PUBLIC_EXPONENT is inconsistently optional for C_GenerateKeyPair ↵Dina K Nimeh1-3/+53
for RSA keys 6820888 CKA_MODULUS_BITS attribute is sometimes missing in pkcs11_softtoken
2009-04-106439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mappingAnthony Scarpino9-59/+45
6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system 6177650 Wrong error code returned when key does not allow requested operation 6437677 C_GenerateKey with missing CKA_VALUE_LEN attr should fail with CKR_TEMPLATE_INCOMPLETE 6499687 softDSA.c should use a meaningful #define rather than a hard coded number 6773550 Crypto Framework is too strict when checking DSA key parameters 6815120 C_Logout with metaslot can leave metaslot object info in memory 6606384 SCF consumers crash after mechanisms are disabled using cryptoadm when using libumem 6636169 softtoken is confused by .nfs files 6636960 C_GetOperationState should fail if there is no active digest operation 6627939 functional test failure - got CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT
2009-03-206666204 meta slot opens and closes /dev/urandom needlessly for every readDina K Nimeh9-199/+51
6722460 finish moving /dev/random and /dev/urandom seeding and usage to libcryptoutil
2009-02-276784451 consolidate duplicative looping_read() and looping_write() code into ↵Dina K Nimeh5-266/+123
libcryptoutil
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami1-2/+14
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2009-02-096796952 bignum sparc not using optimizations in libsoftcryptoAnthony Scarpino1-7/+2
6782907 Certificate signing request (CSR) using certutil fails on T1/T2 based systems 6609549 Sun Metaslot erroneously reports CKR_SESSION_READ_ONLY for C_DestroyObject on RW session 6728680 T2000 SoftToken slot reports absent but non-removable token when .sunw directory inaccessible
2008-09-266638987 soft_delete_session() clears magic_marker too soon for ↵Vladimir Kotal1-5/+9
soft_remove_object_from_session()
2008-09-256720255 soft_digest_init() memory leaks caused by digest operations on a ↵Alexandr Nedvedicky4-138/+158
system with HW crypto provider 6745244 inconsistent locking of soft_session_t mutex in soft_{get,set}_operationstate() 6748371 memcpy() wastes cycles in soft_get_operationstate()/soft_set_operationstate()
2008-09-126693650 kernel implementation of AES lacks support for >64 bits long AES counterMark Powers3-22/+16
2008-09-096589063 typo in 'possiblely' in pkcs#11 kernel/soft tokenViswanathan Kannappan2-24/+22
Contributed by Deepthi Devaki A R <deepthi_05cse14@students.amrita.ac.in> and R Vidya Lakshmi <vidyalakshmi_05cse56@students.amrita.ac.in>
2008-09-086739502 attribute value length checking not always happening or returning ↵Anthony Scarpino1-6/+15
the right error msg
2008-08-036545046 pkcs11_softtoken doesn't properly strip pkcs7 paddingbubbva1-0/+5
Contributed by Derek Morr <derekmorr@psu.edu>
2008-08-016727960 C_Sign fails when using sensitive ECC private keymcpowers6-47/+63
6731694 CCM unnecessarily allocates output buffers for uio data 6731818 sparc/kcf/Makefile has commented out linkage dependency
2008-07-246559619 Enhance n2cp to support CCM modemcpowers10-59/+310
6637487 put algorithm mode code and other common code into kcf module 6648214 need CKM_AES_CTR for softtoken --HG-- rename : usr/src/common/crypto/aes/aes_cbc_crypt.c => deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.c rename : usr/src/common/crypto/aes/aes_cbc_crypt.h => deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.h rename : usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c => deleted_files/usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c rename : usr/src/common/crypto/blowfish/blowfish_cbc_crypt.h => deleted_files/usr/src/common/crypto/blowfish/blowfish_cbc_crypt.h rename : usr/src/common/crypto/des/des_cbc_crypt.c => deleted_files/usr/src/common/crypto/des/des_cbc_crypt.c rename : usr/src/common/crypto/des/des_cbc_crypt.h => deleted_files/usr/src/common/crypto/des/des_cbc_crypt.h
2008-06-076548350 pkcs11 pthread_atfork() covers insufficient locksrupertk3-2/+93
2008-05-066494306 need single source for bignum codefr412797-121/+122
--HG-- rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32 rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
2008-02-29PSARC/2006/610 Data Encryption Kit (SUNWcry) Removalbubbva2-37/+2
6498066 PSARC/2006/610 Data Encryption Kit (SUNWcry) Removal --HG-- rename : usr/src/common/openssl/crypto/sunw.c => deleted_files/usr/src/common/openssl/crypto/sunw.c rename : usr/src/lib/openssl/libcrypto/common/mapfile => deleted_files/usr/src/lib/openssl/libcrypto/common/mapfile rename : usr/src/lib/openssl/libcrypto_extra/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/Makefile rename : usr/src/lib/openssl/libcrypto_extra/Makefile.com => deleted_files/usr/src/lib/openssl/libcrypto_extra/Makefile.com rename : usr/src/lib/openssl/libcrypto_extra/amd64/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/amd64/Makefile rename : usr/src/lib/openssl/libcrypto_extra/i386/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/i386/Makefile rename : usr/src/lib/openssl/libcrypto_extra/sparc/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/sparc/Makefile rename : usr/src/lib/openssl/libcrypto_extra/sparcv9/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/sparcv9/Makefile rename : usr/src/lib/openssl/libssl_extra/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/Makefile rename : usr/src/lib/openssl/libssl_extra/Makefile.com => deleted_files/usr/src/lib/openssl/libssl_extra/Makefile.com rename : usr/src/lib/openssl/libssl_extra/amd64/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/amd64/Makefile rename : usr/src/lib/openssl/libssl_extra/i386/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/i386/Makefile rename : usr/src/lib/openssl/libssl_extra/sparc/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/sparc/Makefile rename : usr/src/lib/openssl/libssl_extra/sparcv9/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/sparcv9/Makefile rename : usr/src/lib/pkcs11/Makefile.softtoken.amd64 => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.amd64 rename : usr/src/lib/pkcs11/Makefile.softtoken.com => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.com rename : usr/src/lib/pkcs11/Makefile.softtoken.i386 => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.i386 rename : usr/src/lib/pkcs11/README.Makefiles => deleted_files/usr/src/lib/pkcs11/README.Makefiles rename : usr/src/lib/pkcs11/Makefile.softtoken.sparc => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken/Makefile.softtoken.sparc.1 rename : usr/src/lib/pkcs11/Makefile.softtoken.sparcv9 => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken/Makefile.softtoken.sparcv9.1 rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile.com => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile.com rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/amd64/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/amd64/Makefile rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/i386/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/i386/Makefile rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparc/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparc/Makefile rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparcv9/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparcv9/Makefile rename : usr/src/pkgdefs/SUNWcry/Makefile => deleted_files/usr/src/pkgdefs/SUNWcry/Makefile rename : usr/src/pkgdefs/SUNWcry/pkginfo.tmpl => deleted_files/usr/src/pkgdefs/SUNWcry/pkginfo.tmpl rename : usr/src/pkgdefs/SUNWcry/postinstall => deleted_files/usr/src/pkgdefs/SUNWcry/postinstall rename : usr/src/pkgdefs/SUNWcry/preremove => deleted_files/usr/src/pkgdefs/SUNWcry/preremove rename : usr/src/pkgdefs/SUNWcry/prototype_com => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_com rename : usr/src/pkgdefs/SUNWcry/prototype_i386 => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_i386 rename : usr/src/pkgdefs/SUNWcry/prototype_sparc => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_sparc rename : usr/src/pkgdefs/SUNWcryr/Makefile => deleted_files/usr/src/pkgdefs/SUNWcryr/Makefile rename : usr/src/pkgdefs/SUNWcryr/pkginfo.tmpl => deleted_files/usr/src/pkgdefs/SUNWcryr/pkginfo.tmpl rename : usr/src/pkgdefs/SUNWcryr/postinstall => deleted_files/usr/src/pkgdefs/SUNWcryr/postinstall rename : usr/src/pkgdefs/SUNWcryr/preremove => deleted_files/usr/src/pkgdefs/SUNWcryr/preremove rename : usr/src/pkgdefs/SUNWcryr/prototype_com => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_com rename : usr/src/pkgdefs/SUNWcryr/prototype_i386 => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_i386 rename : usr/src/pkgdefs/SUNWcryr/prototype_sparc => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_sparc rename : usr/src/uts/sparc/aes256/Makefile => deleted_files/usr/src/uts/sparc/aes256/Makefile rename : usr/src/uts/sparc/arcfour2048/Makefile => deleted_files/usr/src/uts/sparc/arcfour2048/Makefile rename : usr/src/uts/sparc/blowfish448/Makefile => deleted_files/usr/src/uts/sparc/blowfish448/Makefile rename : usr/src/uts/sun4u/aes256/Makefile => deleted_files/usr/src/uts/sun4u/aes256/Makefile
2008-02-206522116 handle2session() routines can be improved in pkcs11 librarieskrishna1-18/+10
generated by cgit v1.2.3 (git 2.39.1) at 2025-06-19 04:21:58 +0000