6966188 missing mutex_exit call if error occurs while gathering random bytes

PSARC/2010/146 EOF unnecessary elfsign and kCF options
6855881 clean up unnecessary technology from elfsign and kcf

6719591 non-exploitable integer wraparound issue in copyin_key() [external report]

PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-2
6703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance

6882364 networking wedged up behind blocked taskq_thread() worker

6826942 Need an optimized GCM leveraging Intel's PCMULQDQ instruction

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance

show more ...

6786946 kcf should check the key sizes before passing a job to a provider
6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths

6836582 kcf_limit_hwrng tunable can be removed

6803803 rnd_chpoll() should not reject (EINVAL) events==0

6799258 Continuous RNG test sometimes fails to compare 160-bit blocks

6790685 stubs for random_add_pseudo_entropy() are missing

6703956 Solaris cryptographic framework needs a FIPS-186-2 certifiable RNG

PSARC/2007/093 Crypto Context sharing between providers
6494834 support check for threshold when using hardware providers even for multi-part requests

6488985 kcf_submit_request() should handle the EMPTYQ case for a hardware provider
6478655 kcf should not log complaints as frequently as it does
6470608 /dev/urandom should provide data blocks large

6488985 kcf_submit_request() should handle the EMPTYQ case for a hardware provider
6478655 kcf should not log complaints as frequently as it does
6470608 /dev/urandom should provide data blocks larger then 1040 bytes
6478016 crypto_mechanism32_t should be available from sys/crypto/spi.h

show more ...

PSARC 2006/214 Crypto Framework random number API/SPI update
6374503 C_SeedRandom is too slow causing poor performance with Apache/OpenSSL when using pkcs11

6357426 increase rndmag_threshold and rndbuf_len default values

6266835 Increase default values of /dev/urandom's parameters for kernel SSL needs
6300280 kcf_mech_entry_t structure is no longer aligned right
6308632 mechanism tables have holes making their real s

6266835 Increase default values of /dev/urandom's parameters for kernel SSL needs
6300280 kcf_mech_entry_t structure is no longer aligned right
6308632 mechanism tables have holes making their real size half the intended size

show more ...

OpenSolaris Launch