6972233 Panic is seen when fips-140 mode is enabled and rebooted

6948723 Crypto to pkcs11 error mapping has wrong boundary checks
6936557 kernel_get_func_list does not set fl_verify* flags
6949122 return is missing in aes_check_mech_param in aes crypto module

6966188 missing mutex_exit call if error occurs while gathering random bytes

6875651 move asymmetric crypto to libsoftcrypto
6816864 collect together padding methods used by PKCS#11
6917508 bignum library needs big random number function
6249983 softtoken based RSA/DSA slow o

6875651 move asymmetric crypto to libsoftcrypto
6816864 collect together padding methods used by PKCS#11
6917508 bignum library needs big random number function
6249983 softtoken based RSA/DSA slow on Niagara
6917506 arcfour lint check missing from usr/src/uts/sun4v/Makefile
6917513 move softFipsDSAUtil.c to common/crypto/fips/fips_dsa_util.c
6834849 dsa_sign() produces invalid signature when pkcs11 engine is used via openssl(1) for certain keys

show more ...

PSARC/2010/146 EOF unnecessary elfsign and kCF options
6855881 clean up unnecessary technology from elfsign and kcf

6755097 C_GetMechanismInfo() via pkcs11_kernel doesn't obey kernel provider policy

PSARC/2009/354 Always on / no reboot Solaris Audit
6192139 Solaris auditing should be able to start collecting audit records without a reboot

6849769 crypto modules _init: crypto_register_provider() failed during shutdown
6885135 assertion failed: kcf_dh != NULL
6907099 module load/unload errors could be a little less techie and ominous

4517853 debug.h should include macros to assert implication and equivalence
6915090 struct memlist should have ml_ member prefixes

6719591 non-exploitable integer wraparound issue in copyin_key() [external report]

FWARC 2008/613 KT IOS Performance Counters API
FWARC 2008/615 KT Perf Reg HV API
FWARC 2009/434 KT IOS Performance Counters API Update
FWARC 2009/567 Parallel Boot HV APIs
PSARC 2009/177 Solaris supp

FWARC 2008/613 KT IOS Performance Counters API
FWARC 2008/615 KT Perf Reg HV API
FWARC 2009/434 KT IOS Performance Counters API Update
FWARC 2009/567 Parallel Boot HV APIs
PSARC 2009/177 Solaris support for Rainbow Falls platforms
PSARC 2009/389 Sun4v faulted SP events extension
PSARC 2009/533 CRYPTO_HMAC_NO_UPDATE - A new KCF SPI flag
PSARC 2009/605 more sun4v platform-independent cpu/mem FMA events
PSARC 2009/649 Generic PCIe root complex FMA events
6704999 extend xaui enum to work in platform independent world
6773223 RFE: guest epkt for faulted SP
6773225 RFE: Diagnosis of a faulted SP
6797776 Solaris support for Rainbow Falls platforms

show more ...

6783915 numerous drivers using devacc_attr_access without specifying DDI_DEVICE_ATTR_V1
6765185 ddi_dma_mem_alloc should ignore devacc_attr_access
6886100 DDI_FLAGERR_ACC accesses on x86 should use i

6783915 numerous drivers using devacc_attr_access without specifying DDI_DEVICE_ATTR_V1
6765185 ddi_dma_mem_alloc should ignore devacc_attr_access
6886100 DDI_FLAGERR_ACC accesses on x86 should use i_ddi_prot_io_get8() calls as on sparc
6886098 ddi_fm_acc_err_get()/ddi_fm_dma_err_get() copy data when they don't need to
6901678 crossbow changes broke dma handle checking in bge driver
6901000 lint warning in mtst_cpu.c

show more ...

6899006 Remove .byte asm directives and use new Intel Westmere opcodes
6647055 x86_64 MD5/SHA1 assembly source should use 32-bit registers when the assembler supports it

PSARC/2009/396 Tickless Kernel Architecture / lbolt decoupling
6860030 tickless clock requires a clock() decoupled lbolt / lbolt64
Portions contributed by Chad Mynhier <cmynhier@gmail.com>

6579499 update operations should be able to use in-place transformations

6895660 Successful message for FIPS 140 would be nice
6895651 FIPS 140 POST thread can get hung up

6889491 DEBUG kernels panic during startup in fips140_actions

PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-2
6703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance

6885193 assignment of ssize_t to uint_t in kcf_check_prov_mech_keylen() produces lint noise

6882364 networking wedged up behind blocked taskq_thread() worker

6826942 Need an optimized GCM leveraging Intel's PCMULQDQ instruction

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance

show more ...

6786946 kcf should check the key sizes before passing a job to a provider
6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths

6861521 panic in kcf when calling kcf_free_provider_desc

6821090 Contents of /etc/crypto/kcf.conf should not influence mechanisms available to kernel consumers.