Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement more options, for p11kcv #60

Merged
merged 3 commits into from
Jun 5, 2024

Conversation

keldonin
Copy link
Contributor

This PR brings the following features:

  • CKA_CHECK_VALUE can be used (when present)
  • support for CMAC
  • support for XCBC-MAC and XBCB-MAC-96
  • support for legacy (FIPS PUB 113) MAC on 3DES keys
  • attributes (signing and encryption) are checked before respective functions are invoked
  • documentation changes.

This PR should address the requests from issue #59.

include/pkcs11lib.h Outdated Show resolved Hide resolved
lib/pkcs11_kcv.c Outdated Show resolved Hide resolved
lib/pkcs11_kcv.c Outdated Show resolved Hide resolved
Removing whitespace.
Removing whitespace.
Copy link
Contributor

@EditUndo EditUndo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Green lighting because these are tactical changes, but in a future commit we should:

  • Remove mac_algo_t; atleast from the main header because it only appears to be used in kcv logic. We can pass the string directly and process it in the kcv lib.

  • Reduce the size of large functions in the kcv lib; bulky functions make the logic difficult to follow.

  • Reduce the number of preallocated mechanisms.

@keldonin keldonin merged commit 0482afd into Mastercard:master Jun 5, 2024
3 checks passed
@keldonin keldonin deleted the implement_kcv_changes branch June 5, 2024 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants