Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: opencryptoki | Distribution: CentOS |
Version: 3.22.0 | Vendor: CentOS |
Release: 3.el9 | Build date: Fri Feb 16 13:41:58 2024 |
Group: Unspecified | Build host: ppc64le-02.stream.rdu2.redhat.com |
Size: 883196 | Source RPM: opencryptoki-3.22.0-3.el9.src.rpm |
Packager: builder@centos.org | |
Url: https://github.com/opencryptoki/opencryptoki | |
Summary: Implementation of the PKCS#11 (Cryptoki) specification v3.0 |
Opencryptoki implements the PKCS#11 specification v2.20 for a set of cryptographic hardware, such as IBM 4764 and 4765 crypto cards, and the Trusted Platform Module (TPM) chip. Opencryptoki also brings a software token implementation that can be used without any cryptographic hardware. This package contains the Slot Daemon (pkcsslotd) and general utilities.
CPL
* Fri Feb 16 2024 Than Ngo <than@redhat.com> - 3.22.0-3 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22792 * Thu Feb 08 2024 Than Ngo <than@redhat.com> - 3.22.0-2 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22792 * Tue Nov 21 2023 Than Ngo <than@redhat.com> - 3.22.0-1 - Resolves: RHEL-11412, rebase to 3.22.0 - Resolves: RHEL-10569, openCryptoki for PKCS #11 3.0 * Fri Jul 14 2023 Than Ngo <than@redhat.com> - 3.21.0-8 - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222596, p11sak fails as soon as there reside non-key objects * Tue Jun 13 2023 Than Ngo <than@redhat.com> - 3.21.0-5 - add requirement on selinux-policy >= 38.1.14-1 for pkcsslotd policy sandboxing Related: #2160061 * Fri May 26 2023 Than Ngo <than@redhat.com> - 3.21.0-4 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2160061 * Mon May 22 2023 Than Ngo <than@redhat.com> - 3.21.0-3 - Resolves: #2110497, concurrent MK rotation for cca token - Resolves: #2110498, concurrent MK rotation for ep11 token - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS - Resolves: #2111010, cca token: protected key support - Resolves: #2160061, rebase to 3.21.0 - Resolves: #2160105, pkcsslotd hardening - Resolves: #2160107, p11sak support Dilithium and Kyber keys - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS * Mon Jan 30 2023 Than Ngo <than@redhat.com> - 3.19.0-2 - Resolves: #2044182, Support of ep11 token for new IBM Z Hardware (IBM z16) * Tue Oct 11 2022 Than Ngo <than@redhat.com> - 3.19.0-1 - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys - Resolves: #2110314, rebase to 3.19.0 - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens - Resolves: #2110476, openCryptoki ep11 token: master key consistency - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation * Fri Jul 29 2022 Than Ngo <than@redhat.com> - 3.18.0-4 - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged * Tue Jun 07 2022 Than Ngo <than@redhat.com> - 3.18.0-3 - Related: #2044179, fix json output * Mon May 09 2022 Than Ngo <than@redhat.com> - 3.18.0-2 - Related: #2044179, add missing strength.conf * Mon May 09 2022 Than Ngo <than@redhat.com> - 3.18.0-1 - Resolves: #2044179, rebase to 3.18.0 - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode - Resolves: #2066763, Dilithium support not available - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools - Resolves: #2044181, support crypto profiles - Resolves: #2044180, add crypto counters * Tue May 03 2022 Than Ngo <than@redhat.com> - 3.17.0-6 - Resolves: #2066763, Dilithium support not available * Mon Mar 14 2022 Than Ngo <than@redhat.com> - 3.17.0-5 - Resolves: #2064697, ICA/EP11: Support libica version 4
/etc/opencryptoki /etc/opencryptoki/opencryptoki.conf /etc/opencryptoki/p11sak_defined_attrs.conf /etc/opencryptoki/strength.conf /run/lock/opencryptoki /run/lock/opencryptoki/icsf /run/lock/opencryptoki/swtok /run/opencryptoki /usr/lib/.build-id /usr/lib/.build-id/2d /usr/lib/.build-id/2d/aecbf9adcc56788dea10b4be8697eaffceac22 /usr/lib/.build-id/3d /usr/lib/.build-id/3d/82e5fd50fb0400e5ef7aac26a5dffad3b3a63d /usr/lib/.build-id/85 /usr/lib/.build-id/85/57c291611afa467318e90e615856e4a7f8e7ab /usr/lib/.build-id/95 /usr/lib/.build-id/95/1aa1093dcc01bcd56ae91dbdacba60ea4c35ad /usr/lib/.build-id/d2 /usr/lib/.build-id/d2/5215f5d6ee0619d1471199c7cc0d36905381fd /usr/lib/.build-id/f6 /usr/lib/.build-id/f6/d0f70c78ba02fdfe8819c9afd9822c665c1bb1 /usr/lib/systemd/system/pkcsslotd.service /usr/lib/tmpfiles.d/opencryptoki.conf /usr/lib64/opencryptoki/methods /usr/lib64/pkcs11/methods /usr/sbin/p11sak /usr/sbin/pkcsconf /usr/sbin/pkcshsm_mk_change /usr/sbin/pkcsslotd /usr/sbin/pkcsstats /usr/sbin/pkcstok_migrate /usr/share/doc/opencryptoki /usr/share/doc/opencryptoki/ChangeLog /usr/share/doc/opencryptoki/FAQ /usr/share/doc/opencryptoki/README.md /usr/share/doc/opencryptoki/README.token_data /usr/share/doc/opencryptoki/opencryptoki-howto.md /usr/share/doc/opencryptoki/policy-example.conf /usr/share/doc/opencryptoki/strength-example.conf /usr/share/man/man1/p11sak.1.gz /usr/share/man/man1/pkcsconf.1.gz /usr/share/man/man1/pkcshsm_mk_change.1.gz /usr/share/man/man1/pkcsstats.1.gz /usr/share/man/man1/pkcstok_migrate.1.gz /usr/share/man/man5/opencryptoki.conf.5.gz /usr/share/man/man5/p11sak_defined_attrs.conf.5.gz /usr/share/man/man5/policy.conf.5.gz /usr/share/man/man5/strength.conf.5.gz /usr/share/man/man7/opencryptoki.7.gz /usr/share/man/man8/pkcsslotd.8.gz /var/lib/opencryptoki /var/lib/opencryptoki/HSM_MK_CHANGE
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Feb 12 05:09:36 2025