alick wrote:
> Hi all
> 
> When I input the command "cryptoadm list -m" on solaris 10, the information 
> shows as follows:
> 
> Kernel software providers:
> ==========================
> des: CKM_DES_ECB,CKM_DES_CBC,CKM_DES3_ECB,CKM_DES3_CBC
> aes: CKM_AES_ECB,CKM_AES_CBC,CKM_AES_CTR
> 
> I want to use the CKM_AES_CTR api to implement aes counter mode.

Those providers are accessible only from the kernel.

> But I can't find that api. 
> 
> The special information on my machine is as follows:
> bash-3.00$ uname -a
> SunOS eao1sh20097 5.10 Generic_118833-17 sun4u sparc SUNW,Sun-Blade-1500
> 
> bash-3.00$ more /usr/include/security/pkcs11.h
> /* pkcs11.h include file for PKCS #11. */
> /* $Revision: 1.4 $ */
> 
> How can I use the CKM_AES_CTR api on solaris 10? I even can't find the proper 
> hear file.

The revision of PKCS#11 implemented in Solaris 10 did not have a 
definition for CKM_AES_CTR - that was added to the PKCS#11 spec *after* 
Solaris shipped.  We plan to add it to OpenSolaris pkcs11_softtoken (the 
userland equivalent to the kernel aes provider) along with CKM_AES_CCM 
(which is not yet defined in the PKCS#11 spec).

-- 
Darren J Moffat
_______________________________________________
opensolaris-code mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/opensolaris-code

Reply via email to