Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | pkcs11: We have to create our own hashes for some signature schemes. | Tobias Brunner | 2011-11-02 | 4 | -12/+81 | |
| | ||||||
* | pkcs11: Lookup the public key of a private key by CKA_ID. | Tobias Brunner | 2011-11-02 | 2 | -0/+125 | |
| | | | | | | Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there. | |||||
* | pkcs11: Search for private keys in a more generic way. | Tobias Brunner | 2011-11-02 | 1 | -20/+19 | |
| | | | | | | Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key. | |||||
* | pkcs11: Added support to encode ECDSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+89 | |
| | ||||||
* | pkcs11: Parse ECDSA public keys and find/create them on tokens. | Tobias Brunner | 2011-11-02 | 1 | -2/+177 | |
| | ||||||
* | pkcs11: Added generic functions to find/create public keys on tokens. | Tobias Brunner | 2011-11-02 | 1 | -40/+75 | |
| | ||||||
* | pkcs11: Store public key length in bits. | Tobias Brunner | 2011-11-02 | 1 | -3/+3 | |
| | ||||||
* | pkcs11: Fix encoding of RSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+4 | |
| | ||||||
* | pkcs11: Use create_object_attr_enumerator to encode RSA public key. | Tobias Brunner | 2011-11-02 | 1 | -17/+7 | |
| | ||||||
* | pkcs11: Instead of a mutex use a new session to do multipart operations. | Tobias Brunner | 2011-11-02 | 2 | -40/+66 | |
| | ||||||
* | pkcs11: Function added to retrieve multiple attributes from a single object. | Tobias Brunner | 2011-11-02 | 2 | -6/+62 | |
| | ||||||
* | pkcs11: Memory leak fixed in DH/ECDH implementation. | Tobias Brunner | 2011-11-02 | 1 | -0/+2 | |
| | ||||||
* | pkcs11: Invalid free fixed in DH/ECDH implementation. | Tobias Brunner | 2011-11-02 | 1 | -1/+4 | |
| | ||||||
* | pkcs11: Changed how pkcs11-manager is initialized. | Tobias Brunner | 2011-11-02 | 1 | -42/+32 | |
| | | | | | The manager is now created directly, but events and certificate loading is deferred. | |||||
* | pkcs11: Add attributes to specify what we use the DH/ECDH keys for. | Tobias Brunner | 2011-11-02 | 1 | -2/+10 | |
| | ||||||
* | pkcs11: Use callback registration for pkcs11-manager. | Tobias Brunner | 2011-10-31 | 1 | -25/+73 | |
| | | | | | | Otherwise a plugin providing X509 decoding capabilities might be unloaded before the manager which will result in a segmentation fault when certificates in the manager's credential sets are to be destroyed. | |||||
* | pkcs11: Merged the ECDH into the DH implementation. | Tobias Brunner | 2011-10-31 | 5 | -404/+209 | |
| | ||||||
* | pkcs11: Use get_ck_attribute for ECDH. | Tobias Brunner | 2011-10-31 | 1 | -63/+13 | |
| | ||||||
* | pkcs11: Use get_ck_attribute for DH. | Tobias Brunner | 2011-10-31 | 1 | -28/+6 | |
| | ||||||
* | pkcs11: Method added to library to extract a single attribute from an object. | Tobias Brunner | 2011-10-31 | 2 | -1/+50 | |
| | ||||||
* | pkcs11: Added names for CKA_* constants. | Tobias Brunner | 2011-10-31 | 2 | -1/+123 | |
| | ||||||
* | pkcs11: Added support for ECDH. | Tobias Brunner | 2011-10-31 | 4 | -1/+422 | |
| | ||||||
* | pkcs11: Added definitions needed for ECDH to pkcs11.h. | Tobias Brunner | 2011-10-31 | 1 | -0/+24 | |
| | ||||||
* | pkcs11: Specify object class and key type when deriving DH secrets. | Tobias Brunner | 2011-10-31 | 1 | -0/+4 | |
| | | | | pkcs11_softtoken on OpenSolaris requires this (probably others too). | |||||
* | pkcs11: Add features support. | Tobias Brunner | 2011-10-31 | 3 | -84/+90 | |
| | ||||||
* | pkcs11: Added support for DH. | Tobias Brunner | 2011-10-31 | 4 | -0/+377 | |
| | ||||||
* | pkcs11: Error message fixed. | Tobias Brunner | 2011-10-31 | 1 | -1/+1 | |
| | ||||||
* | pkcs11: Added support to generate random numbers on a token. | Tobias Brunner | 2011-10-31 | 4 | -0/+201 | |
| | ||||||
* | pkcs11: Properly destroy mutex in pkcs11_hasher if no token found. | Tobias Brunner | 2011-10-31 | 1 | -0/+1 | |
| | ||||||
* | Register manager of pkcs11 plugin as library object | Martin Willi | 2011-08-24 | 6 | -28/+8 | |
| | ||||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 2 | -2/+2 | |
| | | | | Mostly found by 'codespell'. | |||||
* | Provide recursive mutex' just in case the PKCS#11 library requires it | Martin Willi | 2011-06-01 | 1 | -1/+1 | |
| | ||||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 | |
| | ||||||
* | Revert alloc_str changes | Martin Willi | 2011-04-21 | 1 | -5/+4 | |
| | | | | | | This reverts commit fdead26ffe1da8501a6ff5e0639a6f44c723e763. This reverts commit 3e2419ebe32de72d824864eb2e0e677a7c197af1. This reverts commit 17ce69b47a1efd6234960cf7d1f50712aee61db5. | |||||
* | Use thread save settings alloc_str function where appropriate | Martin Willi | 2011-04-21 | 1 | -4/+5 | |
| | ||||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 | |
| | ||||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -8/+13 | |
| | | | | over plugin_t | |||||
* | corrected pkcs11 error message | Andreas Steffen | 2011-03-01 | 1 | -1/+1 | |
| | ||||||
* | Fixed public key construction from PKCS#11 private key | Martin Willi | 2010-12-23 | 1 | -3/+3 | |
| | ||||||
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 1 | -6/+8 | |
| | ||||||
* | Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20 | Martin Willi | 2010-11-18 | 3 | -3/+12 | |
| | ||||||
* | Use static args for C_Initialize(), OpenSC does not get a copy of the pointers | Martin Willi | 2010-11-18 | 1 | -5/+7 | |
| | ||||||
* | Added a PKCS#11 module option to enforce OS Locking functions | Martin Willi | 2010-11-12 | 3 | -8/+19 | |
| | ||||||
* | Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all ↵ | Martin Willi | 2010-11-10 | 1 | -7/+16 | |
| | | | | certs as trusted | |||||
* | Add flags for PKCS#11 libraries with reduced feature set | Martin Willi | 2010-11-10 | 2 | -0/+51 | |
| | ||||||
* | Added a final flag to builder registration to enumerate the actually ↵ | Martin Willi | 2010-09-03 | 1 | -2/+2 | |
| | | | | supported algorithms | |||||
* | Scheduler and processor have been moved to libstrongswan. | Tobias Brunner | 2010-09-02 | 2 | -4/+2 | |
| | | | | | Also reverts 0c21dc000d3cd5c82eb22c4481e6459978456364 as the dependency to libcharon is no longer required. | |||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 3 | -20/+28 | |
| | ||||||
* | Implemented public key encryption/private key decryption in PKCS#11 | Martin Willi | 2010-08-11 | 3 | -13/+108 | |
| | ||||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 2 | -4/+4 | |
| |