gpp_maybe
Recommended update for opencryptoki
SUSE-SLE-Module-Server-Applications-15-SP7-2025-4418
This update for openCryptoki fixes the following issues: - Upgrade openCryptoki to 3.26 (bsc#1254422) * Soft: Add support for RSA keys up to 16K bits. * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later). * p11sak: Add support for generating RSA keys up to 16K bits. * Soft/ICA: Add support for SHA512/224 and SHA512/256 key derivation mechanism * Soft/ICA/CCA/EP11: Add support for SHA-HMAC key types CKK_SHAxxx_HMAC and key gen mechanisms CKM_SHAxxx_KEY_GEN. * p11sak: Add support for SHA-HMAC key types and key generation. * p11sak: Add support for key wrap and unwrap commands to export and import private and secret keys by means of key wrapping/unwrapping with various key wrapping mechanism. * p11kmip: Add support for using an HSM-protected TLS client key via a PKCS#11 provider. * p11sak: Add support for exporting non-sensitive private keys to password protected PEM files. * Add support for canceling an operation via NULL mechanism pointer at C_XxxInit() call as an alternative to C_SessionCancel() (PKCS#11 v3.0). * EP11: Add support for pairing friendly BLS12-381 EC curve for sign/verify using CKM_IBM_ECDSA_OTHER and signature/public key aggregation using CKM_IBM_EC_AGGREGATE. * p11sak: Add support for generating BLS12-381 EC keys. * EP11: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms * CCA: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms * Soft: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms * p11sak: Add support for IBM-specific ML-DSA and ML-KEM key types. * Bug fixes. - Upgrade openCryptoki to version 3.25 (jsc#PED-3361) * ICA/Soft: Add support for PKCS#11 v3.0 SHAKE key derivation * EP11: Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * EP11: Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * EP11: Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * CCA: Add support for CCA AES CIPHER secure key types * CCA: Add support for the CKM_ECDH1_DERIVE mechanism * Soft/ICA: Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * CCA/Soft/ICA: Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Soft/ICA: Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * ICA: Report mechanisms dependent on if libica is in FIPS mode * P11KMIP: Add a tool for import and exporting PKCS#11 keys to a KMIP server * EP11: Add support for opaque secure key blob import via C_CreateObject * Soft/ICA: Add support for key wrapping with AES-GCM * CCA: Add support for newer CCA versions on s390x and non-s390x platforms * CCA: Add support for CKM_AES_GCM (single-part operations only) * Bug fixes - Amended the .spec file
-
Release DateDec 16 2025
-
References
-
Typerecommended
-
Severityimportant
cloud_download Downloads
Server Applications Module 15.7 s390x
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.26.0-150700.5.6.1 lock rpm lock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-devel3.26.0-150700.5.6.1 lock rpm
Development files for openCryptoki, a PKCS#11 implementation for IBM hardware3.26.0-150700.5.6.1 lock rpm
Server Applications Module 15.7 x86_64
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.26.0-150700.5.6.1 lock rpm lock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-devel3.26.0-150700.5.6.1 lock rpm
Development files for openCryptoki, a PKCS#11 implementation for IBM hardware3.26.0-150700.5.6.1 lock rpm
Server Applications Module 15.7 aarch64
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.26.0-150700.5.6.1 lock rpm lock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-devel3.26.0-150700.5.6.1 lock rpm
Development files for openCryptoki, a PKCS#11 implementation for IBM hardware3.26.0-150700.5.6.1 lock rpm
Server Applications Module 15.7 ppc64le
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.26.0-150700.5.6.1 lock rpm lock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-devel3.26.0-150700.5.6.1 lock rpm
Development files for openCryptoki, a PKCS#11 implementation for IBM hardware3.26.0-150700.5.6.1 lock rpm