- #202 Export RSA key attributes from mbedtls context to support TLSv1.3
- Fix doxygen deployment on Github.
- #195,#196 Add more unit test to increase code coverage rate
- #193 Fix the C_GetAttributeValue implementation in the mbedtls port to return CK_UNAVAILABLE_INFORMATION
- #192 Use MBedTLS v3.6.0 LTS and v2.28.8 in mbedtls integration test
- #190 Fix MISRA C 2012 deviations
- #184 Support MBedTLS 3.5.1
- #183 Support optional write generated private key and certificate to disk for fleet provisioning
- #182 Fix incorrect RSA verify data length check
- #178 Adjust prvAddObjectToList so that it adds or updates as necessary
- #163 Update doxygen to 1.9.6
- #156 MISRA C:2012 compliance updates
- #155 Update CBMC Starter kit
- #150 Update CorePKCS11 mbedtls implementation to support mbedtls version 3.x in addition to version 2.x
- #137 Fix code in winsim PAL missed in prior refactor.
- #133 Update doxygen version for documentation.
- #129 Enable address sanitizer for tests in PR Checks.
- #128 Fix invalid memory read in system tests.
- #126 Add default values for Claim credentials label configuration macros.
- #125 Fix memory leaks in corePKCS11.
- #123 Changes PAL folder structure and adds core+pkcs11_pal_utils for shared code between PALs.
- #124 Add backwards compatibility for deprecated configuration macros.
- #121 Add labels for supporting Claim credentials useful for Fleet Provisioning feature of AWS IoT Core.
- #122 Add
core_pkcs11_config_defaults.h
file for default definition of configuration macros. and make doxygen documentation fixes.
- #119 Update mbedTLS submodule to v2.26.0.
- #118 Update version numbers and add C++ header guards
- #116 Remove redundant mbedtls error sources
- #115 Update broken links to MISRA in documentation
- #113 Fix description of CBMC in README
- #112 Add additional validation of the return value of mbedtls_pk_write_*_der functions
- #111 Add AES-CMAC algorithm support in Windows port
- #110 Hygiene fixes in CI checks
- #104 Minor MISRA fixes
- #103 Fix doxygen main page generation
- #102 Feature: AES CMAC Sign/SignInit
- #101 Feature: AES CMAC - VerifyInit/Verify
- #98 Fix MISRA regressions
- #97 Implement C_CreateObject for AES CMAC keys
- #96 Feature: SHA256-HMAC sign
- #95 Feature: SHA256-HMAC C_SignInit
- #94 Fix system test output suppresion
- #91 Fix potential double free in core_pkcs11.c
- #86 Feature: SHA256-HMAC VerifyInit
- #84 Feature: Import SHA256-HMAC secret Key
- Removed default
PKCS11_PAL_DestroyObject
implementation fromcore_pkcs11_mbedtls.c
. #74. This means that all PAL ports must implementPKCS11_PAL_DestroyObject
.
- Changed
xFindObjectWithLabelAndClass
to include a size parameter to allow the caller to specify the size of the passed in label. - Added CBMC memory proofs for all functions
- Removed
threading_alt.h
from corePKCS11 - Restructured third party folder in order to align with other core repositories. Folders located in
corePKCS11/3rdparty
are now incorePKCS11/source/dependency/3rdparty
. - Updated logs and format specifiers to use standard C types.
- Added a POSIX PAL port.
- Replaced iot prefix on files with core prefix.
This is the first release of the corePKCS11 library in this repository.
This library is a software based implementation of the PKCS #11 specification.
- PKCS #11 library is now decoupled from the FreeRTOS-Kernel, and instead uses mutex and heap function abstractions provided by mbed TLS.
- The PKCS #11 library logging has been overhauled and is now decoupled from FreeRTOS.
- Added
PKCS11_PAL_Initialize
tocore_pkcs11_pal.h
to defer PAL layer initialization to PKCS #11 PAL.