CXI
Loading...
Searching...
No Matches
Change History
Author
Dipl. Inf. Rainer Herbertz
Dipl. Ing. Sven Kaltschmidt
Utimaco IS GmbH
*
* 1.00 | 28.04.2009  | initial release
* 1.01 | 23.06.2009  | key groups
* 1.02 | 01.07.2009  | internal test version
* 1.03 | 15.07.2009  | release
* 1.04 | 09.09.2009  | added: keep session alive
* 1.05 | 23.09.2009  | added: provider detection (SUN / IBM)
* 1.10 | 08.10.2009  | 'Outsourcing': splitted off CryptoServerCXI to own package
*      |             | listKeys: added filter (group, name, specifier)
*      |             | removed: keyGroup and keySpecifier
* 1.11 | 26.10.2009  | bugfix: length of PROP_LIST2 (getKeyProperties)
*      |             | bugfix: importKey: attributes == null
* 1.12 | 29.10.2009  | added: KEY_ALGO_RAW
* 1.13 | 05.11.2009  | bugfix: importClearKey: copy all relevant attributes
* 1.20 | 15.01.2010  | CryptoServerCluster
* 1.21 | 04.06.2010  | added: CryptoServerCluster with configuration object
*      |             | bugfix: importClearKey: set key name attribute properly
* 1.30 | 06.09.2010  | added: KeyStore
* 1.31 | 22.09.2010  | added: restoreKey(Key,KeyAttributes,boolean)
* 1.32 | 01.10.2010  | findKey optionally returns key blob now
*      |             | added: default event handler (writes to log file)
*      |             | bugfix on KeyStore.findKey in case mode==MODE_EQUAL and attributes given but don't match
* 1.33 | 17.05.2011  | added some new constants from cxi_defs.h
* 1.40 | 27.06.2011  | bugfix: replaced invalid constant MECH_PAD_ZERO by MECH_PAD_7816
*      |             | improved: method crypt is now able to handle large data blocks (> maximum command block size := 256KB).
*      |             | Blocks larger than 240000 bytes are automatically split into smaller chunks. If padding mode != 0 padding is only applied to the last chunk.
*      |             | added: bulkSign, bulkCrypt
*      |             | added: HMAC to sign/verify
* 1.41 | 21.07.2011  | bugfix: importKey now allows parameter keyTemplate being set to null.
*      |             | added: computeHash
* 1.42 | 03.08.2011  | added some new constants from cxi_defs.h
* 1.43 | 11.08.2011  | added: setKeyAttributes
*      |             | bugfix: findKey: evaluate flags parameter properly
*      |             | added: setGenerationDate(byte []), setExpirationDate(byte [])
* 1.44 | 15.08.2011  | bugfix: crypt, computeHash: handle data == null
* 1.45 | 14.09.2011  | bugfix: modified error code type modifier (errlist didn't recognize CXI error codes)
*      |             | modified: KeyAttributes.setInt: value '0' is now valid attribute value
* 1.46 | 15.09.1011  | added: PROP_CFG_WRAP_POLICY
* 1.47 | 19.09.2011  | added: KeyAttributes.setType
* 1.48 | 27.09.2011  | modified: setGroup("") explicitely sets empty (global) group
*      |             | added: MECH_PAD_ZEROFILL replaces previously removed MECH_PAD_ZERO
* 1.49 | 28.09.2011  | bugfix: setString / getString preserves value=null and value=""
* 1.50 | 23.11.2011  | added: PROP_CFG_AUTH_KEYM, PROP_CFG_AUTH_USER
* 1.51 | 09.03.2012  | modified: exportKey now returns complete key blob including enclosing tag 'KB' [Mantis #397]
*      |             |           importKey now accepts key blobs in complete form as well as in truncated form.
* 1.52 | 03.04.2012  | bugfix: set group property on importClearKey (Mantis #424)
* 1.53 | 07.05.2012  | added: agreeSecret [Mantis #456]
*      |             | bugfix: KeyAttAndComp class handles new key blob format ('KB')
* 1.54 | 15.06.2012  | improved: recognize size tags ('kb', 'mb', 'gb') in configuration value of 'LogSize' (Mantis #421)
*      |             | changed: default log file size := 1000000 (Mantis #421)
*      |             | changed: if the  log file size is 0 the log file may grow without limitation (Mantis #421)
* 1.55 | 05.07.2012  | corrected small typo in error code text (Mantis #486)
* 1.56 | 10.09.2012  | increased minimum required version of CryptoServerAPI to 1.47
* 1.57 | 11.09.2012  | added: ECDSA signature example to documentation
*      |             | added: FLAG_HASH_DATA to sign and verify
* 1.60 | 29.04.2013  | added: AES GCM chaining mode
*      |             | added: AES OFB chaining mode
*      | 30.04.2013  | added: ECIES mode (Mantis #601)
* 1.61 | 04.07.2013  | bugfix: verify(key,mech,data,sign) now maps correctly to verify(0,key,mech,null,data,sign,null) (Mantis #760)
* 1.62 | 27.11.2015  | added FIPS 186-4 support for RSA and DSA in generateKey, generateDSADomainParam, generateDSAPQParam, generateDSAGParam
* 1.63 | 14.01.2016  | documentation and test cases for ECDSA bulk signing
* 1.64 | 08.03.2016  | [HSM-1352/1354] (MLE) added: config attributes to selectively enable strict behaviour mitigating known PKCS#11 vulnerabilities
* 1.64a| 15.04.2016  | [HSM-782] improvement: document maximum size of database index
* 1.65 | 13.05.2016  | [HSM-977] Added class Keyfile to export the public components of an RSA key to a keyfile
* 1.66 | 23.06.2016  | [HSM-1949] (MLE) added: SHA3 support
*