shield
Security update for opencryptoki
SUSE-SLE-SERVER-12-SP5-2024-2298
This update for openCryptoki fixes the following issues: openCryptoki was updated to version to 3.17.0 (bsc#1220266, bsc#1219217) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks + openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes + openCryptoki 3.15.1 - Bug fixes + openCryptoki 3.15 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named "Vendor IBM" - Support C_IBM_ReencryptSingle via "Vendor IBM" interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes + openCryptoki 3.14 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak + openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF + openCryptoki 3.12.1 - Fix pkcsep11_migrate tool + openCryptoki 3.12.0 - Update token pin and data store encryption for soft,ica,cca and ep11 - EP11: Allow importing of compressed EC public keys - EP11: Add support for the CMAC mechanisms - EP11: Add support for the IBM-SHA3 mechanisms - SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token - ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token - EP11: Add config option USE_PRANDOM - CCA: Use Random Number Generate Long for token_specific_rng() - Common rng function: Prefer /dev/prandom over /dev/urandom - ICA: add SHA*_RSA_PKCS_PSS mechanisms - Bug fixes
-
Release DateJul 4 2024
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server 12.5 aarch64
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware3.17.0-5.9.2lock rpmlock src
SUSE Linux Enterprise Server 12.5 ppc64le
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.17.0-5.9.2lock rpmlock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware3.17.0-5.9.2lock rpm
SUSE Linux Enterprise Server 12.5 s390x
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-32bit3.17.0-5.9.2lock rpmlock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.17.0-5.9.2lock rpm
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware3.17.0-5.9.2lock rpm
SUSE Linux Enterprise Server 12.5 x86_64
-
PackagesopenCryptoki
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareopenCryptoki-64bit3.17.0-5.9.2lock rpmlock src
An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware3.17.0-5.9.2lock rpm