similar to: PSARC 2005/576 Support for complex cryptographic mechanisms

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 9bb308a0778101fcef9ff65336bcec8e68a7bd06 Total changesets: 40 Log message: resynv onnv-gate Files: .hgtags deleted_files/usr/src/cmd/fps/Makefile.inc deleted_files/usr/src/cmd/fps/Makefile.subdirs deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.c

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 3df1f6b01f2e4234af95267b22947e416a38d4ca Total changesets: 1 Log message: removal of AES_CBC_PAD from kernel Files: update: usr/src/cmd/cmd-crypto/etc/kcf.conf update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/common/crypto/aes/aes_cbc_crypt.h update:

Author: ahl Repository: /hg/zfs-crypto/gate Revision: 0f27629eb96eb9ce7ab1322830d1f3839b9c7da1 Log message: PSARC 2005/689 ELF Extended Program Headers 6317969 elfheader limited to 65535 segments 6317980 coredump elfheader doesn''t reflect the correct number of dumped segments 6343698 p-tools affected by 6317980 : coredump elfheader incorrectly states number of dumped segments 6350070 stub

Author: kais Repository: /hg/zfs-crypto/gate Revision: 4c19f37f44f83def06a8aab4c0e079347eedd284 Log message: PSARC/2005/625 Greyhound - Solaris Kernel SSL proxy 4931229 Kernel-level SSL proxy Files: create: usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/Makefile create: usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/kssladm.c create: usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/kssladm.h create:

Author: mcpowers Repository: /hg/zfs-crypto/gate Revision: 96cccf53906cb9bb5a733b8ca426f5f511392252 Log message: PSARC 2006/214 Crypto Framework random number API/SPI update 6374503 C_SeedRandom is too slow causing poor performance with Apache/OpenSSL when using pkcs11 Files: update: usr/src/lib/pkcs11/libpkcs11/common/metaGeneral.c update: usr/src/lib/pkcs11/libpkcs11/common/metaGlobal.h

Author: izick Repository: /hg/zfs-crypto/gate Revision: f7c96af91f148327ba792c8fbcb9e49897664f9c Log message: PSARC 2005/572 PKCS#11 v2.20 4920408 PKCS#11 v2.20 support for the Crypto Framework 6287425 residual bzero''s in hmac part of sha2 6287428 add sha2 to the i.kcfconfbase upgrade script Files: create: usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c create:

Author: kais Repository: /hg/zfs-crypto/gate Revision: af99262cf4c4e55fca29e9b86ad9369fd928745e Log message: PSARC/2005/413 sun4v optimized MD5 and arcfour kernel cryptographic modules 6278572 port Spracklen''s fast MD5 on Niagara to solaris 6278578 port Spracklen''s fast RC4 on Niagara to solaris Files: create: usr/src/common/crypto/arcfour/sun4v/arcfour_crypt.c create:

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: 8f164ec4380058ccbc31e7c8ab05c85d0c3d85c5 Total changesets: 1 Log message: aes cbc pad added to kernel software provider Files: update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/common/crypto/aes/aes_cbc_crypt.h update: usr/src/uts/common/crypto/io/aes.c

Author: edp Repository: /hg/zfs-crypto/gate Revision: 3e0648b166ae35e1f3a8f34c03dfe1574e87f55a Log message: 6224278 iwscn should be deobfuscated 6347629 stream head freed before wscons is done with it Files: update: usr/src/uts/common/io/iwscons.c update: usr/src/uts/common/io/strredirm.c update: usr/src/uts/common/io/wscons.c update: usr/src/uts/common/os/space.c update:

Author: rmesta Repository: /hg/zfs-crypto/gate Revision: 4af930f29a665f04c4cf91ef1fbc049fb427a304 Log message: 6417056 nfssrv should use doors/xdr as its IPC mech to mountd(1m) Files: create: deleted_files/usr/src/uts/common/rpcsvc/nfsauth_prot.x create: usr/src/cmd/fs.d/nfs/mountd/nfsauth_xdr.c create: usr/src/uts/common/fs/nfs/nfs_auth_xdr.c create: usr/src/uts/common/nfs/auth.h delete:

hi, i have a problem with ocfs. i did some tests with dbms_stats on a 2-node RAC and got the following error: Thu Feb 17 15:36:31 2005 KCF: write/open error block=0x7800 online=1 file=13 /db/GKEZ/tablespaces/voeb/idx01_kez.dbf error=27072 txt: 'Linux Error: 5: Input/output error Additional information: 30719' Automatic datafile offline due to write error on file 13:

Author: mcpowers Repository: /hg/zfs-crypto/gate Revision: 15e96f4c6276c8742d81985eb84de4a8effe208c Log message: 6363872 AES counter mode increments wrong counter bits on i386 Files: update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/uts/common/crypto/io/aes.c

Hi thanks for your posts so far. Since what I had assumed was a 32 bit kernel which I compiled didn''t work, I religiously set out on compiling a 64 bit version as my system is currently booted in 64 bit mode. I installed SUNStudio12 on the system and set the SPRO_VROOT to point towards it and when I do a make all in usr/src directory, I get the following error when make cwds and runs in

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Anyone else using CFS on CentOS 4.4 ? I have started using it today (unimportant stuff for now, for testing), and am wondering what are other people experiences with it. I'm using version 1.4.1, rpms kindly provided by Karan on his repository. My main concern is data loss, not security itself. From what I noticed, the strenght of CFS crypto is

These two functions in cipher.c (I have looked at openssh5.8p1 & openssh5.9p1) copy the internal cryptographic state of an OpenSSL RC4 encryption/decryption context using simple memcpy(). This code also copies the state when evptype is EVP_acss, which I am unfamiliar with. This code appears to works fine when using the builtin crypto of OpenSSL 1.0.0d. However, I have been doing some work

Asterisk Project Security Advisory - AST-2008-007 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Asterisk installations using cryptographic keys | | | generated

https://bugzilla.mindrot.org/show_bug.cgi?id=2054 Bug ID: 2054 Summary: Environment fails to provide cryptographic identity of remote party Classification: Unclassified Product: Portable OpenSSH Version: 5.9p1 Hardware: All OS: All Status: NEW Keywords: low-hanging-fruit,

I have one thing happening now at boot which must have happened during the migration to zfs boot. I get an error message about /dev/random: "No randomness provider enabled for /dev/random. Use cryptoadm to provide one." Does anyone know how to fix this? Another thing: Is it possible to upgrade to a higher build when using zfs boot? Is this what LiveUpgrade does? And is there a step by

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 957d30a3607ed9f3cbe490da5894d1e1b2104033 Total changesets: 28 Log message: resync onnv_105 partial for 6713916 Files: usr/src/Makefile.lint usr/src/Targetdirs usr/src/cmd/Makefile usr/src/cmd/Makefile.cmd usr/src/cmd/acctadm/Makefile usr/src/cmd/acctadm/acctadm.xcl

Author: gjelinek Repository: /hg/zfs-crypto/gate Revision: b5e2c3c08438c9b843f43151654fa3e4a23793a6 Log message: PSARC 2005/711 Zone move and clone 6292928 RFE: provide faster zone provisioning 4963361 RFE: zoneadm move command Files: update: usr/src/cmd/zoneadm/zoneadm.c