6966188 missing mutex_exit call if error occurs while gathering random bytes

PSARC/2010/146 EOF unnecessary elfsign and kCF options
6855881 clean up unnecessary technology from elfsign and kcf

6719591 non-exploitable integer wraparound issue in copyin_key() [external report]

FWARC 2008/613 KT IOS Performance Counters API
FWARC 2008/615 KT Perf Reg HV API
FWARC 2009/434 KT IOS Performance Counters API Update
FWARC 2009/567 Parallel Boot HV APIs
PSARC 2009/177 Solaris supp

FWARC 2008/613 KT IOS Performance Counters API
FWARC 2008/615 KT Perf Reg HV API
FWARC 2009/434 KT IOS Performance Counters API Update
FWARC 2009/567 Parallel Boot HV APIs
PSARC 2009/177 Solaris support for Rainbow Falls platforms
PSARC 2009/389 Sun4v faulted SP events extension
PSARC 2009/533 CRYPTO_HMAC_NO_UPDATE - A new KCF SPI flag
PSARC 2009/605 more sun4v platform-independent cpu/mem FMA events
PSARC 2009/649 Generic PCIe root complex FMA events
6704999 extend xaui enum to work in platform independent world
6773223 RFE: guest epkt for faulted SP
6773225 RFE: Diagnosis of a faulted SP
6797776 Solaris support for Rainbow Falls platforms

show more ...

PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-2
6703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance

6882364 networking wedged up behind blocked taskq_thread() worker

6826942 Need an optimized GCM leveraging Intel's PCMULQDQ instruction

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance

show more ...

6786946 kcf should check the key sizes before passing a job to a provider
6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths

6836582 kcf_limit_hwrng tunable can be removed

4781345 me_mutex lock in kcf_mech_entry_t can be broken up
6771819 Use of atomic increment in KCF causes scaling problems on multi-socket T2 systems
6705174 C_EncryptInit scaling issues on T2plus
681

4781345 me_mutex lock in kcf_mech_entry_t can be broken up
6771819 Use of atomic increment in KCF causes scaling problems on multi-socket T2 systems
6705174 C_EncryptInit scaling issues on T2plus
6813873 assertion failed: (prov_desc)->pd_refcnt != 0, file: ../../common/crypto/core/kcf_prov_tabs.c, line

show more ...

6803803 rnd_chpoll() should not reject (EINVAL) events==0

6799258 Continuous RNG test sometimes fails to compare 160-bit blocks

6790685 stubs for random_add_pseudo_entropy() are missing

PSARC 2007/001 lofi(7d) crypto support
4926125 lofi(7d) should support encrypted block devices
6236948 need userland interface to list crypto algorithms available to kernel consumers

6703956 Solaris cryptographic framework needs a FIPS-186-2 certifiable RNG

PSARC/2007/213 Support KCF Providers with Limited Digest Capability
6473274 pkcs11_kernel should support multipart ops even for hardware that has only single part
6534615 For extra credit, dprov coul

PSARC/2007/213 Support KCF Providers with Limited Digest Capability
6473274 pkcs11_kernel should support multipart ops even for hardware that has only single part
6534615 For extra credit, dprov could make HMAC mechanisms work for PKCS #11 clients
6541772 usr/src/cmd/mdb/common/modules/crypto/sched_impl.c should not include stdlib.h
6542759 HMAC mechanisms broken in sha2 kernel module

show more ...

PSARC/2007/093 Crypto Context sharing between providers
6494834 support check for threshold when using hardware providers even for multi-part requests

6509484 Needless calls to KCF_PROV_REFHOLD() in some routines

6488985 kcf_submit_request() should handle the EMPTYQ case for a hardware provider
6478655 kcf should not log complaints as frequently as it does
6470608 /dev/urandom should provide data blocks large

6488985 kcf_submit_request() should handle the EMPTYQ case for a hardware provider
6478655 kcf should not log complaints as frequently as it does
6470608 /dev/urandom should provide data blocks larger then 1040 bytes
6478016 crypto_mechanism32_t should be available from sys/crypto/spi.h

show more ...

PSARC/2006/540 Crypto event notification update
6385143 Support usage of non-extractable keys
6466686 need events to support session based clients
6466693 need a routine to get provider information g

PSARC/2006/540 Crypto event notification update
6385143 Support usage of non-extractable keys
6466686 need events to support session based clients
6466693 need a routine to get provider information given a provider handle
6465847 ksslcfg reports service to be online even when there is an error
6469846 dprov needs to set CKF_LOGIN_REQUIRED

show more ...

PSARC 2006/214 Crypto Framework random number API/SPI update
6374503 C_SeedRandom is too slow causing poor performance with Apache/OpenSSL when using pkcs11

6399680 logical provider selects busy member

6357426 increase rndmag_threshold and rndbuf_len default values

PSARC 2005/576 Support for complex cryptographic mechanisms
PSARC 2005/630 session, object, and key management kernel crypto API
PSARC 2005/656 AES CTR mode for KCF
PSARC 2005/659 Hiding members of K

PSARC 2005/576 Support for complex cryptographic mechanisms
PSARC 2005/630 session, object, and key management kernel crypto API
PSARC 2005/656 AES CTR mode for KCF
PSARC 2005/659 Hiding members of KCF logical providers
4721729 Support AES Counter mode for encryption
6243992 dprov stores attributes based on data model of application
6203141 Sessions and objects management kernel crypto API
6253484 Support mechanisms with complex mech_param structures across the EF stack
6314217 Hide underlying providers of logical providers

show more ...