Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-05-25 | Start cleaning up PIN code. | Rob Austein | |
2016-05-16 | Fix inverted length check. | Rob Austein | |
2016-05-16 | Round buffer size up to word boundary when verifying RSA signatures. | Rob Austein | |
hsmbully tests strange RSA key sizes (eg, 3416 bits) which don't fall on word boundaries, at which point we have buffer padding and alignment issues when performing RSA signature verification. | |||
2016-05-15 | Add hal_rpc_pkey_rename(); allow null string as (temporary) key name. | Rob Austein | |
Temporary nature of null string as key name is not enforced by the keystore code, it's just a convention to allow callers to generate a keypair, obtain the public key, hash that to a Subject Key Identifier (SKI), and rename the key using the SKI as the new name. This is a compromise to let us use SKI-based key names in PKCS #11 while keeping the keystore code simple. | |||
2016-05-14 | Trailing whitespace cleanup. | Rob Austein | |
2016-05-14 | Clean up pkey mixed mode. | Rob Austein | |
2016-05-14 | Add mixed-mode key support, for PKCS #11 "session" (ie, not "token") keys. | Rob Austein | |
2016-05-12 | Add hal_digest_algorithm_none; tweak handling of none handles. | Rob Austein | |
2016-03-11 | First round of debugging based on RPC pkey tests: mostly ASN.1 | Rob Austein | |
silliness, with a bit of PKCS #1.5 padding silliness for desert. | |||
2015-12-24 | More work on PIN/login/logout code. Access control still missing, | Rob Austein | |
committing now so Paul has a chance to look at the current RPC API. | |||
2015-12-23 | RPC interface to TRNG and (incomplete) PIN code. | Rob Austein | |
2015-12-22 | Add ASN.1 support for public keys (X.509 SubjectPublicKeyInfo format). | Rob Austein | |
2015-12-21 | Fix names of private key DER functions. | Rob Austein | |
2015-12-20 | Drop support for the ASN.1-based ECDSA signature format in favor of | Rob Austein | |
the simpler format which PKCS #11 uses, since we have to support the latter in any case and it's not worth the complexity of supporting both. | |||
2015-12-20 | RPC server stuff mostly written. Compiles, not yet tested. RPC | Rob Austein | |
public key extraction functions on hold pending ASN.1 cleanup. |