5045 use atomic_{inc,dec}_* instead of atomic_add_* Reviewed by: Matthew Ahrens <mahrens@delphix.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Robert Mustacchi <rm@joyent.com>
PSARC/2010/146 EOF unnecessary elfsign and kCF options 6855881 clean up unnecessary technology from elfsign and kcf
6755097 C_GetMechanismInfo() via pkcs11_kernel doesn't obey kernel provider policy
6719591 non-exploitable integer wraparound issue in copyin_key() [external report]
FWARC 2008/613 KT IOS Performance Counters API FWARC 2008/615 KT Perf Reg HV API FWARC 2009/434 KT IOS Performance Counters API Update FWARC 2009/567 Parallel Boot HV APIs PSARC 2009/177 Solaris support for Rainbow Falls platforms PSARC 2009/389 Sun4v faulted SP events extension PSARC 2009/533 CRYPTO_HMAC_NO_UPDATE - A new KCF SPI flag PSARC 2009/605 more sun4v platform-independent cpu/mem FMA events PSARC 2009/649 Generic PCIe root complex FMA events 6704999 extend xaui enum to work in platform independent world 6773223 RFE: guest epkt for faulted SP 6773225 RFE: Diagnosis of a faulted SP 6797776 Solaris support for Rainbow Falls platforms
6579499 update operations should be able to use in-place transformations
6786946 kcf should check the key sizes before passing a job to a provider 6831413 multiple SCF providers advertise wrong boundaries for CKM_DES3_{CBC,ECB}{,_PAD} key lengths
6855407 kernel crypto module reports firmware version incorrectly 6854979 kmf_pkcs11.so.1 has bad SONAME and versioning
6842120 crypto_attach leaks in snv_115
4781345 me_mutex lock in kcf_mech_entry_t can be broken up 6771819 Use of atomic increment in KCF causes scaling problems on multi-socket T2 systems 6705174 C_EncryptInit scaling issues on T2plus 6813873 assertion failed: (prov_desc)->pd_refcnt != 0, file: ../../common/crypto/core/kcf_prov_tabs.c, line
6236948 need userland interface to list crypto algorithms available to kernel consumers (fix lint)
PSARC 2007/001 lofi(7d) crypto support 4926125 lofi(7d) should support encrypted block devices 6236948 need userland interface to list crypto algorithms available to kernel consumers
6767649 vmem_hash_delete: bad free issue
6722032 symmetric crypto scalability issues on batoka
PSARC 2008/382 Fast Reboot 6714038 Fast Reboot support for x86 platforms
6714050 panic when a kcf provider under use is unregistered
6604363 Bulk encryption and digest algorithms have poor scalability on T5140/T5240
6560793 crypto modules should not use SCCS keywords in user-visible strings 6598279 AES provider has incorrect definition for CK_AES_CTR_PARAMS 6601271 C_Verify() must pass CKA_EC_PARAMS to HW providers 6603350 CK_*_PARAMS definitions should be in <sys/crypto/common.h>
6482533 Threshold for HW offload via PKCS11 interface
6534628 /dev/crypto can use in-place when calling crypto_encrypt API
PSARC 2007/092 key generation and derivation for providers without keystore 6462782 Metaslot needs to generate a token object from a session object. 6462780 Softtoken keystore needs to store keys ECC objects 6339802 support keygen operations by acceleration only providers
PSARC/2007/213 Support KCF Providers with Limited Digest Capability 6473274 pkcs11_kernel should support multipart ops even for hardware that has only single part 6534615 For extra credit, dprov could make HMAC mechanisms work for PKCS #11 clients 6541772 usr/src/cmd/mdb/common/modules/crypto/sched_impl.c should not include stdlib.h 6542759 HMAC mechanisms broken in sha2 kernel module
6533554 crypto_buffer_check() is still expensive
PSARC/2007/093 Crypto Context sharing between providers 6494834 support check for threshold when using hardware providers even for multi-part requests
6520071 crypto_buffer_check() is costly and is a scalability bottleneck
5039325 pkcs11_kernel should be caching mechanism numbers from kCF 6480505 crypto_mech2id_common() could go faster
PSARC 2006/214 Crypto Framework random number API/SPI update 6374503 C_SeedRandom is too slow causing poor performance with Apache/OpenSSL when using pkcs11
6399680 logical provider selects busy member
PSARC 2005/576 Support for complex cryptographic mechanisms PSARC 2005/630 session, object, and key management kernel crypto API PSARC 2005/656 AES CTR mode for KCF PSARC 2005/659 Hiding members of KCF logical providers 4721729 Support AES Counter mode for encryption 6243992 dprov stores attributes based on data model of application 6203141 Sessions and objects management kernel crypto API 6253484 Support mechanisms with complex mech_param structures across the EF stack 6314217 Hide underlying providers of logical providers
6303913 NULL in template to C_UnwrapKey causes panic in kEF.
OpenSolaris Launch