sw/pkcs11 - PKCS #11 library for Cryptech on top of libhal RPC

Age	Commit message (Collapse)	Author
2016-05-17	Bugfixes to new error handling code, refactor some unreadable nested logic ↵	Rob Austein
	in handle lookup code. The mapping between PKCS #11 objects and libhal handles isn't quite right yet. This is a snapshot of bugfixes accumulated along the way, before refactoring mapping code to deal with the underlying problem.
2016-05-17	Start error handling cleanup and rewrite.	Rob Austein
	Error handling and hte underlying functions and macros that support it will probably change a bit more as it goes along. Trying to strike the right balance between having the main code be readable and having the underlying support code be at least comprehensible and straightforward to review. Also need to address current over-use of CKR_FUNCTION_FAILED.
2016-05-16	Fix leading zero handling in Py11's BigInteger encoder.	Rob Austein

2016-05-16	Identical CKA_ID values no longer constitute a conflict, adjust test.	Rob Austein

2016-05-15	Use key hashes instead of CKA_ID to name objects in libhal keystore.	Rob Austein

2016-05-15	Update hsmbully recipe for libhsm RPC.	Rob Austein

2016-05-15	Fix broken unit test.	Rob Austein
	Turns out that the one remaining old PKCS #11 unit test we weren't passing was a broken test: code was correctly rejecting CKA_ID conflicts. Rewrote test, and added test setup code to use separate client and server keystores when using the ks_mmap keystore driver.
2016-05-14	Key flag handling, more trailing whitespace cleanup.	Rob Austein
	At this point we are passing most of the unit tests in RPC loopback mode. Remaining failure is TestKeys.test_keygen_token_vs_session(), which gets HAL_ERROR_KEY_NAME_IN_USE when attempting to generate a session key and a token key with the same CKA_ID value, so clearly something is not quite right yet in the keystore selection logic.
2016-05-14	Add (back) ability to construct public keys from stored attributes.	Rob Austein

2016-05-14	Track (trivial) libhal API change.	Rob Austein

2016-05-13	Sort out some disagreements between our command line parsing and unit_test's ↵	Rob Austein
	defaults.
2016-05-13	Rework unit_test framework to use argparse and to run RPC server ↵	Rob Austein
	automatically if present.
2016-05-13	The libhal RPC channel works better when one remembers to initialize it.	Rob Austein

2016-05-12	Fix RSA key length and CKA_ID lookup.	Rob Austein
	libhal RPC API takes RSA key lengths in bits, not bytes. Insisting on receiving matching CKA_ID in both public and private templates on key generation is probably unwise, so back down using CKA_ID from private template if provided, otherwise from the public template, and only raise incompete template error if both are missing.
2016-05-12	Remove vestigial KEK code, that's all handled by libhal now.	Rob Austein

2016-05-12	p11util now uses libhal and doesn't need to touch SQL.	Rob Austein
	"p11util" is now something of a misnomer, since there's no longer anything about it that's specific to PKCS #11. Probably should become a libhal utility program, eventually.
2016-05-12	First pass on converting from direct libhal calls to libhal RPC calls.	Rob Austein
	This version isn't really expected to work properly, but it's far enough along to be worth archiving before starting runtime testing.
2016-05-06	Track API changes on sw/libhal rpc branch.	Rob Austein
	So far this is just dumb little things like changed names for old data types and functions. Changes to use new API features will come later.
2015-12-13	whack copyrights	Paul Selkirk

2015-10-04	Minimal conversion to config_core_selector libhal API. Not doing	Rob Austein
	anything particularly clever with the new capabilities (yet).
2015-09-22	Update README.md.	Rob Austein

2015-09-22	Makefile cleanup.	Rob Austein

2015-09-22	Clean up Python APIs to C_FindObject*() and C_GetSlotList().	Rob Austein

2015-09-21	Better test for keypair object class.	Rob Austein

2015-09-21	More key unit tests.	Rob Austein

2015-09-21	More test cases.	Rob Austein

2015-09-21	Add keyword arguments to C_GenerateKeyPair() in an attempt to present	Rob Austein
	a saner API to the user. This requires the library to know more than it really should about which attributes go into the public and private templates; if doing it this way proves infeasible, we may have to parse more details out of attributes.yaml to support this feature.
2015-09-21	Unit tests for init, session, and login functions.	Rob Austein

2015-09-21	First step towards unit tests.	Rob Austein

2015-09-20	Minimal documentation for py11.	Rob Austein

2015-09-20	Debug mutex implementation.	Rob Austein

2015-09-20	Implement mutexes in py11 library using threading.Lock objects.	Rob Austein

2015-09-18	MUTEX callbacks via ctypes. Beware of Garbage Collector.	Rob Austein

2015-09-17	Enable locking in py11.	Rob Austein

2015-09-16	Call correct underlying methods from wrappers.	Rob Austein

2015-09-16	Add C_SignUpdate(), C_SignFinal(), C_VerifyUpdate(), C_VerifyFinal().	Rob Austein

2015-09-15	Checkpoint of py11-test.py.	Rob Austein

2015-09-15	py11 support for C_CreateObject().	Rob Austein

2015-09-15	Add C_CreateObject(), which required refactoring some of the ↵	Rob Austein
	template-checking code.
2015-09-14	Debug PKCS #11 ECDSA signature and verification.	Rob Austein

2015-09-12	Move YAML parsing to external script so py11 doesn't have to worry	Rob Austein
	about finding attributes.yaml at runtime.
2015-09-12	Add attribute database based on attributes.yaml.	Rob Austein
	Simplify prototype definitions and move them to separate module.
2015-09-11	Remove CKA_NAME_HASH_ALGORITHM for now. It appears in the	Rob Austein
	specification but not in the header file, so we don't know its numeric value in any case. Re-add if and when it shows up in the header file.
2015-09-11	Fix size_t vs CK_ULONG type mismatch (platform dependent).	Rob Austein

2015-09-11	Python ctypes arrays and pointers really do work just as in C, once	Rob Austein
	one wraps one's brain around the syntactic differences.
2015-09-11	Add C_FindObject*() to py11.	Rob Austein

2015-09-11	First cut at Python interface to PKCS #11 using ctypes API.	Rob Austein

2015-09-11	verify_rsa_pkcs() should be static.	Rob Austein

2015-09-09	Add ECDSA signature and verification. Compiles, not tested.	Rob Austein

2015-09-09	Refactor C_Sign() and C_Verify() to move algorithm-dependent code to	Rob Austein
	helper functions. As a happy side effect, this also simplifies locking slightly and gives us a straightforward path towards the Update() and Final() incremental-hashing functions. Compiles, not yet tested.