From sacadmin Tue Apr 17 07:54:24 2007
Received: from sac.sfbay.sun.com (localhost [127.0.0.1])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l3HEsOUa016033;
	Tue, 17 Apr 2007 07:54:24 -0700 (PDT)
Received: (from darrenm@localhost)
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id l3HEsOGV016028;
	Tue, 17 Apr 2007 07:54:24 -0700 (PDT)
Date: Tue, 17 Apr 2007 07:54:24 -0700 (PDT)
From: Darren J Moffat <darrenm@sac.sfbay.sun.com>
Message-Id: <200704171454.l3HEsOGV016028@sac.sfbay.sun.com>
To: PSARC@sac.sfbay.sun.com
Cc: crypto-discuss@opensolaris.org
Subject: SHA224 support in Cryptographic Framework [PSARC/2007/219 Timeout:  04/11/2007]
Status: RO
Content-Length: 3106

Subject: PSARC FastTrack [04/11/2007]: SHA224 support in Cryptographic Framework


Template Version: @(#)sac_nextcase %I% %G% SMI

1. Introduction
    1.1. Project/Component Working Name:
	 SHA224 support in Cryptographic Framework
    1.2. Name of Document Author/Supplier:
	 Author:  Darren Moffat
    1.3  Date of This Document:
	17 April, 2007
4. Technical Description

This case updates the Cryptographic Framework with support for SHA244.

We already support the FIPS 180-2 defined SHA256,384,512.  A later
ammendment to that standard added SHA224.

Some IETF standards such as NFSv4.1 require SHA244 in addition to
SHA256,384,512.

This case adds SHA244 support to the following components of
the Cryptographic Framework:

Updated Components

+-----------------------------------------+-----------------------------------+
| kernel/crypto/sha2                      | Consolidation Private             |
| Mechanisms:	CKM_SHA224                |                                   |
|               CKM_SHA224_HMAC           |                                   |
|               CKM_SHA224_HMAC_GENERAL   |                                   |
+-----------------------------------------+-----------------------------------+
| pkcs11_softtoken.so                     | Commited                          |
| Mechanisms:	CKM_SHA224                | PKCS#11 v2.20 Amendment 3         |
|               CKM_SHA224_HMAC           |                                   |
|               CKM_SHA224_HMAC_GENERAL   |                                   |
|               CKM_SHA224_RSA_PKCS       |                                   |
|               CKM_SHA224_KEY_DERIVATION |                                   |
+-----------------------------------------+-----------------------------------+
| libmd.so                                | Commited                          |
| SHA244_CTX                              |                                   |
| SHA244Init()                            | materials/libmd.3lib              |
| SHA244Update()                          | materials/sha2.3ext               |
| SHA244Final()                           |                                   |
| SHA2Init() mech numbers:                |                                   |
|   SHA224, SHA224_HMAC, SHA224_HMAC_GEN  |                                   |
+-----------------------------------------+-----------------------------------+

Note that due to previous implementation choices a naive addition
of SHA244 could cause either a possible performance issue or a ABI
issue with libmd (but not with the KCF or PKCS#11 interfaces).  This
case resolves this issue but requires that all kernel/crypto/sha2, libmd
and pkcs11_softtoken deliver concurrently to do so.   The ABI and API
of libmd is preserved.

A release binding of patch is requested incase this needs to be
backported to a Solaris 10 update release to support a consumer of
it (such as NFSv4.1).


6. Resources and Schedule
    6.4. Steering Committee requested information
   	6.4.1. Consolidation C-team Name:
		ON
    6.5. ARC review type: FastTrack

From sacadmin Tue Apr 17 08:03:16 2007
Received: from sfbaymail2sca.sfbay.sun.com (sfbaymail2sca.SFBay.Sun.COM [129.145.155.42])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l3HF3GRS016437;
	Tue, 17 Apr 2007 08:03:16 -0700 (PDT)
Received: from nwk-ea-fw-1.sun.com (nwkes-gis-mail-1.SFBay.Sun.COM [10.4.134.5])
	by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id l3HF2D1b021519;
	Tue, 17 Apr 2007 08:02:13 -0700 (PDT)
Received: from d1-sfbay-09.sun.com ([192.18.39.119])
	by nwk-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l3HF288V027689;
	Tue, 17 Apr 2007 08:02:08 -0700 (PDT)
Received: from sun.com ([10.4.135.19])
 by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr
 3 2006)) with ESMTP id <0JGN0012UDRKAU2J@d1-sfbay-09.sun.com>; Tue,
 17 Apr 2007 08:02:08 -0700 (PDT)
Received: from [192.18.108.176] (Forwarded-For: [129.159.190.41])
 by nedge2-mail1.sfbay.sun.com (mshttpd); Tue, 17 Apr 2007 17:02:08 +0200
Date: Tue, 17 Apr 2007 17:02:08 +0200
From: Ferenc Rakoczi <Ferenc.Rakoczi@Sun.COM>
Subject: Re: [crypto-discuss] SHA224 support in Cryptographic Framework
 [PSARC/2007/219 Timeout: 04/11/2007]
In-reply-to: <200704171454.l3HEsOGV016028@sac.sfbay.sun.com>
To: Darren J Moffat <darrenm@sac.sfbay.sun.com>
Cc: PSARC@sac.sfbay.sun.com, crypto-discuss@opensolaris.org
Message-id: <f713b7442d3a.4624fd90@sun.com>
MIME-version: 1.0
X-Mailer: Sun Java(tm) System Messenger Express 6.2-6.01 (built Apr  3 2006)
Content-type: text/plain; charset=us-ascii
Content-language: en
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-Accept-Language: en
Priority: normal
References: <200704171454.l3HEsOGV016028@sac.sfbay.sun.com>
Status: RO
Content-Length: 3824

Darren,

 you should change the 244s in this to 224s.

Ferenc

----- Original Message -----
From: Darren J Moffat <darrenm@sac.sfbay.sun.com>
Date: Tuesday, April 17, 2007 4:53 pm
Subject: [crypto-discuss] SHA224 support in Cryptographic Framework [PSARC/2007/219 Timeout: 04/11/2007]
To: PSARC@sac.sfbay.sun.com
Cc: crypto-discuss@opensolaris.org

> Subject: PSARC FastTrack [04/11/2007]: SHA224 support in 
> Cryptographic Framework
> 
> 
> Template Version: @(#)sac_nextcase %I% %G% SMI
> 
> 1. Introduction
>    1.1. Project/Component Working Name:
>         SHA224 support in Cryptographic Framework
>    1.2. Name of Document Author/Supplier:
>         Author:  Darren Moffat
>    1.3  Date of This Document:
> 	17 April, 2007
> 4. Technical Description
> 
> This case updates the Cryptographic Framework with support for SHA244.
> 
> We already support the FIPS 180-2 defined SHA256,384,512.  A later
> ammendment to that standard added SHA224.
> 
> Some IETF standards such as NFSv4.1 require SHA244 in addition to
> SHA256,384,512.
> 
> This case adds SHA244 support to the following components of
> the Cryptographic Framework:
> 
> Updated Components
> 
> +-----------------------------------------+-------------------------
> ----------+
> | kernel/crypto/sha2                      | Consolidation Private   
>          |
> | Mechanisms:	CKM_SHA224                |                           
>        |
> |               CKM_SHA224_HMAC           |                         
>          |
> |               CKM_SHA224_HMAC_GENERAL   |                         
>          |
> +-----------------------------------------+-------------------------
> ----------+
> | pkcs11_softtoken.so                     | Commited                
>          |
> | Mechanisms:	CKM_SHA224                | PKCS#11 v2.20 Amendment 3 
>        |
> |               CKM_SHA224_HMAC           |                         
>          |
> |               CKM_SHA224_HMAC_GENERAL   |                         
>          |
> |               CKM_SHA224_RSA_PKCS       |                         
>          |
> |               CKM_SHA224_KEY_DERIVATION |                         
>          |
> +-----------------------------------------+-------------------------
> ----------+
> | libmd.so                                | Commited                
>          |
> | SHA244_CTX                              |                         
>          |
> | SHA244Init()                            | materials/libmd.3lib    
>          |
> | SHA244Update()                          | materials/sha2.3ext     
>          |
> | SHA244Final()                           |                         
>          |
> | SHA2Init() mech numbers:                |                         
>          |
> |   SHA224, SHA224_HMAC, SHA224_HMAC_GEN  |                         
>          |
> +-----------------------------------------+-------------------------
> ----------+
> 
> Note that due to previous implementation choices a naive addition
> of SHA244 could cause either a possible performance issue or a ABI
> issue with libmd (but not with the KCF or PKCS#11 interfaces).  This
> case resolves this issue but requires that all kernel/crypto/sha2, 
> libmdand pkcs11_softtoken deliver concurrently to do so.   The ABI 
> and API
> of libmd is preserved.
> 
> A release binding of patch is requested incase this needs to be
> backported to a Solaris 10 update release to support a consumer of
> it (such as NFSv4.1).
> 
> 
> 6. Resources and Schedule
>    6.4. Steering Committee requested information
>   	6.4.1. Consolidation C-team Name:
>        	ON
>    6.5. ARC review type: FastTrack
> _______________________________________________
> crypto-discuss mailing list
> crypto-discuss@opensolaris.org
> http://opensolaris.org/mailman/listinfo/crypto-discuss
> 

From sacadmin Tue Apr 17 08:07:14 2007
Received: from sfbaymail1sca.SFBay.Sun.COM (sfbaymail1sca.SFBay.Sun.COM [129.145.154.35])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l3HF7E0w016808;
	Tue, 17 Apr 2007 08:07:14 -0700 (PDT)
Received: from sca-ea-mail-2.sun.com (sca-ea-mail-2.Sun.COM [192.18.43.25])
	by sfbaymail1sca.SFBay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l3HF6VER008150;
	Tue, 17 Apr 2007 08:06:31 -0700 (PDT)
Received: from relay3.sun.com (relay3.sun.com [150.143.103.54] (may be forged))
	by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id l3HDu82n021431;
	Tue, 17 Apr 2007 15:06:30 GMT
Received: from mms04es.sun.com ([150.143.104.74] [150.143.104.74]) by relay3.sun.com with ESMTP id BT-MMP-793208; Tue, 17 Apr 2007 15:06:30 Z
Received: from relay3.sun.com (relay3.sun.com [150.143.103.54]) by mms04es.sun.com with ESMTP id BT-MMP-2127972; Tue, 17 Apr 2007 15:06:30 Z
Received: from occp5.ocservers.net ([216.73.122.2] [216.73.122.2]) by relay3.sun.com with ESMTP id BT-MMP-7548658; Tue, 17 Apr 2007 15:06:30 Z
Received: from cpe-76-174-83-55.socal.res.rr.com ([76.174.83.55] helo=[192.168.251.21])
	by occp5.ocservers.net with esmtpsa (TLSv1:AES256-SHA:256)
	(Exim 4.63)
	(envelope-from <garrett@damore.org>)
	id 1HdpGK-0007wT-PN; Tue, 17 Apr 2007 08:06:32 -0700
Message-Id: <4624E259.9020804@damore.org>
Date: Tue, 17 Apr 2007 08:06:01 -0700
From: "Garrett D'Amore" <garrett@damore.org>
User-Agent: Thunderbird 2.0b2 (X11/20070227)
MIME-Version: 1.0
To: Ferenc Rakoczi <Ferenc.Rakoczi@SUN.COM>
CC: Darren J Moffat <darrenm@sac.sfbay.sun.com>, PSARC@sac.sfbay.sun.com,
        crypto-discuss@opensolaris.org
Subject: Re: [crypto-discuss] SHA224 support in Cryptographic Framework	[PSARC/2007/219
 Timeout: 04/11/2007]
References: <200704171454.l3HEsOGV016028@sac.sfbay.sun.com> <f713b7442d3a.4624fd90@sun.com>
In-Reply-To: <f713b7442d3a.4624fd90@sun.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - occp5.ocservers.net
X-AntiAbuse: Original Domain - sac.sfbay.sun.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - damore.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Status: RO
Content-Length: 4255

Ferenc Rakoczi wrote:
> Darren,
>
>  you should change the 244s in this to 224s.
>   

Hi Ferenc!

I was just going to say the same thing. :-)    Otherwise this case looks 
good to me.

    -- Garrett
> Ferenc
>
> ----- Original Message -----
> From: Darren J Moffat <darrenm@sac.sfbay.sun.com>
> Date: Tuesday, April 17, 2007 4:53 pm
> Subject: [crypto-discuss] SHA224 support in Cryptographic Framework [PSARC/2007/219 Timeout: 04/11/2007]
> To: PSARC@sac.sfbay.sun.com
> Cc: crypto-discuss@opensolaris.org
>
>   
>> Subject: PSARC FastTrack [04/11/2007]: SHA224 support in 
>> Cryptographic Framework
>>
>>
>> Template Version: @(#)sac_nextcase %I% %G% SMI
>>
>> 1. Introduction
>>    1.1. Project/Component Working Name:
>>         SHA224 support in Cryptographic Framework
>>    1.2. Name of Document Author/Supplier:
>>         Author:  Darren Moffat
>>    1.3  Date of This Document:
>> 	17 April, 2007
>> 4. Technical Description
>>
>> This case updates the Cryptographic Framework with support for SHA244.
>>
>> We already support the FIPS 180-2 defined SHA256,384,512.  A later
>> ammendment to that standard added SHA224.
>>
>> Some IETF standards such as NFSv4.1 require SHA244 in addition to
>> SHA256,384,512.
>>
>> This case adds SHA244 support to the following components of
>> the Cryptographic Framework:
>>
>> Updated Components
>>
>> +-----------------------------------------+-------------------------
>> ----------+
>> | kernel/crypto/sha2                      | Consolidation Private   
>>          |
>> | Mechanisms:	CKM_SHA224                |                           
>>        |
>> |               CKM_SHA224_HMAC           |                         
>>          |
>> |               CKM_SHA224_HMAC_GENERAL   |                         
>>          |
>> +-----------------------------------------+-------------------------
>> ----------+
>> | pkcs11_softtoken.so                     | Commited                
>>          |
>> | Mechanisms:	CKM_SHA224                | PKCS#11 v2.20 Amendment 3 
>>        |
>> |               CKM_SHA224_HMAC           |                         
>>          |
>> |               CKM_SHA224_HMAC_GENERAL   |                         
>>          |
>> |               CKM_SHA224_RSA_PKCS       |                         
>>          |
>> |               CKM_SHA224_KEY_DERIVATION |                         
>>          |
>> +-----------------------------------------+-------------------------
>> ----------+
>> | libmd.so                                | Commited                
>>          |
>> | SHA244_CTX                              |                         
>>          |
>> | SHA244Init()                            | materials/libmd.3lib    
>>          |
>> | SHA244Update()                          | materials/sha2.3ext     
>>          |
>> | SHA244Final()                           |                         
>>          |
>> | SHA2Init() mech numbers:                |                         
>>          |
>> |   SHA224, SHA224_HMAC, SHA224_HMAC_GEN  |                         
>>          |
>> +-----------------------------------------+-------------------------
>> ----------+
>>
>> Note that due to previous implementation choices a naive addition
>> of SHA244 could cause either a possible performance issue or a ABI
>> issue with libmd (but not with the KCF or PKCS#11 interfaces).  This
>> case resolves this issue but requires that all kernel/crypto/sha2, 
>> libmdand pkcs11_softtoken deliver concurrently to do so.   The ABI 
>> and API
>> of libmd is preserved.
>>
>> A release binding of patch is requested incase this needs to be
>> backported to a Solaris 10 update release to support a consumer of
>> it (such as NFSv4.1).
>>
>>
>> 6. Resources and Schedule
>>    6.4. Steering Committee requested information
>>   	6.4.1. Consolidation C-team Name:
>>        	ON
>>    6.5. ARC review type: FastTrack
>> _______________________________________________
>> crypto-discuss mailing list
>> crypto-discuss@opensolaris.org
>> http://opensolaris.org/mailman/listinfo/crypto-discuss
>>
>>     
> _______________________________________________
> crypto-discuss mailing list
> crypto-discuss@opensolaris.org
> http://opensolaris.org/mailman/listinfo/crypto-discuss
>   


From sacadmin Tue Apr 17 08:08:08 2007
Received: from sfbaymail1sca.SFBay.Sun.COM (sfbaymail1sca.SFBay.Sun.COM [129.145.154.35])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l3HF88oR016844;
	Tue, 17 Apr 2007 08:08:08 -0700 (PDT)
Received: from gmp-ea-fw-1.sun.com (gmpes-gis-mail-2.UK.Sun.COM [129.156.42.6])
	by sfbaymail1sca.SFBay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l3HF7OfG008544;
	Tue, 17 Apr 2007 08:07:25 -0700 (PDT)
Received: from d1-emea-09.sun.com ([192.18.2.119])
	by gmp-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l3HF7JDm029795;
	Tue, 17 Apr 2007 15:07:19 GMT
Received: from conversion-daemon.d1-emea-09.sun.com by d1-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 id <0JGN00101DQYHR00@d1-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM); Tue,
 17 Apr 2007 16:07:19 +0100 (BST)
Received: from [129.150.120.43] by d1-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 with ESMTPSA id <0JGN001C6E04PL30@d1-emea-09.sun.com>; Tue,
 17 Apr 2007 16:07:17 +0100 (BST)
Date: Tue, 17 Apr 2007 16:07:16 +0100
From: Darren J Moffat <Darren.Moffat@Sun.COM>
Subject: Re: [crypto-discuss] SHA224 support in Cryptographic Framework
 [PSARC/2007/219 Timeout: 04/11/2007]
In-reply-to: <f713b7442d3a.4624fd90@sun.com>
Sender: Darren.Moffat@Sun.COM
To: Ferenc Rakoczi <Ferenc.Rakoczi@Sun.COM>
Cc: Darren J Moffat <darrenm@sac.sfbay.sun.com>, PSARC@sac.sfbay.sun.com,
        crypto-discuss@opensolaris.org
Message-id: <4624E2A4.1070400@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
References: <200704171454.l3HEsOGV016028@sac.sfbay.sun.com>
 <f713b7442d3a.4624fd90@sun.com>
User-Agent: Thunderbird 2.0b2 (X11/20070227)
Status: RO
Content-Length: 316

Ferenc Rakoczi wrote:
> Darren,
> 
>  you should change the 244s in this to 224s.

Thanks for catching this - I did exactly the same typo yesterday while 
working on the code but the compiler kindly caught that one for me :-).

I've changed it in the materials directory and the spec.txt file.


-- 
Darren J Moffat

From Darren.Moffat@sun.com Tue Apr 17 08:19:43 2007
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l3HFJge5017616
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 17 Apr 2007 08:19:43 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l3HFIZct003963
	for <@sunmail3mpk.sfbay.sun.com:PSARC-EXT@sun.com>; Tue, 17 Apr 2007 16:18:59 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JGN00301EJKZK00@nwk-avmta-2.sfbay.sun.com> for PSARC-EXT@sun.com
 (ORCPT PSARC-EXT@Sun.COM); Tue, 17 Apr 2007 08:18:56 -0700 (PDT)
Received: from gmp-ea-fw-1.sun.com ([129.156.42.5])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JGN00025EJJHU60@nwk-avmta-2.sfbay.sun.com> for
 PSARC-EXT@sun.com (ORCPT PSARC-EXT@Sun.COM); Tue,
 17 Apr 2007 08:18:56 -0700 (PDT)
Received: from d1-emea-09.sun.com (d1-emea-09.sun.com [192.18.2.119])
	by gmp-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l3HFItqZ000805	for
 <PSARC-EXT@Sun.COM>; Tue, 17 Apr 2007 15:18:55 +0000 (GMT)
Received: from conversion-daemon.d1-emea-09.sun.com by d1-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 id <0JGN00K01EH8YP00@d1-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for PSARC-EXT@Sun.COM (ORCPT PSARC-EXT@Sun.COM); Tue,
 17 Apr 2007 16:18:55 +0100 (BST)
Received: from [129.150.120.43] by d1-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 with ESMTPSA id <0JGN001F9EJIPL30@d1-emea-09.sun.com> for PSARC-EXT@Sun.COM
 (ORCPT PSARC-EXT@Sun.COM); Tue, 17 Apr 2007 16:18:54 +0100 (BST)
Date: Tue, 17 Apr 2007 16:18:54 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: SHA224 support in Cryptographic Framework [PSARC/2007/219 Timeout:
 04/11/2007]
Sender: Darren.Moffat@sun.com
To: PSARC-EXT@sun.com, crypto-discuss@opensolaris.org
Message-id: <4624E55E.8060208@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
User-Agent: Thunderbird 2.0b2 (X11/20070227)
Status: RO
Content-Length: 2710

Template Version: @(#)sac_nextcase %I% %G% SMI

1. Introduction
     1.1. Project/Component Working Name:
	 SHA224 support in Cryptographic Framework
     1.2. Name of Document Author/Supplier:
	 Author:  Darren Moffat
     1.3  Date of This Document:
	17 April, 2007
4. Technical Description

This case updates the Cryptographic Framework with support for SHA224.

We already support the FIPS 180-2 defined SHA256,384,512.  A later
ammendment to that standard added SHA224.

Some IETF standards such as NFSv4.1 require SHA224 in addition to
SHA256,384,512.

This case adds SHA224 support to the following components of
the Cryptographic Framework:

Updated Components

+-----------------------------------------+-----------------------------------+
| kernel/crypto/sha2                      | Consolidation Private        |
| Mechanisms:	CKM_SHA224                | 
     |
|               CKM_SHA224_HMAC           | 
       |
|               CKM_SHA224_HMAC_GENERAL   | 
       |
+-----------------------------------------+-----------------------------------+
| pkcs11_softtoken.so                     | Commited 
       |
| Mechanisms:	CKM_SHA224                | PKCS#11 v2.20 Amendment 3 
     |
|               CKM_SHA224_HMAC           | 
       |
|               CKM_SHA224_HMAC_GENERAL   | 
       |
|               CKM_SHA224_RSA_PKCS       | 
       |
|               CKM_SHA224_KEY_DERIVATION | 
       |
+-----------------------------------------+-----------------------------------+
| libmd.so                                | Commited 
       |
| SHA224_CTX                              | 
       |
| SHA224Init()                            | materials/libmd.3lib 
       |
| SHA224Update()                          | materials/sha2.3ext 
       |
| SHA224Final()                           | 
       |
| SHA2Init() mech numbers:                | 
       |
|   SHA224, SHA224_HMAC, SHA224_HMAC_GEN  | 
       |
+-----------------------------------------+-----------------------------------+

Note that due to previous implementation choices a naive addition
of SHA224 could cause either a possible performance issue or a ABI
issue with libmd (but not with the KCF or PKCS#11 interfaces).  This
case resolves this issue but requires that all kernel/crypto/sha2, libmd
and pkcs11_softtoken deliver concurrently to do so.   The ABI and API
of libmd is preserved.

A release binding of patch is requested incase this needs to be
backported to a Solaris 10 update release to support a consumer of
it (such as NFSv4.1).


6. Resources and Schedule
     6.4. Steering Committee requested information
    	6.4.1. Consolidation C-team Name:
		ON
     6.5. ARC review type: FastTrack

-- 
Darren J Moffat

From Darren.Moffat@sun.com Wed May  2 08:18:07 2007
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l42FI7Qm010626
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 2 May 2007 08:18:07 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l42FH7vI040049
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 2 May 2007 09:17:10 -0600 (MDT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JHF006276GMJR00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 02 May 2007 08:17:10 -0700 (PDT)
Received: from gmp-ea-fw-1.sun.com ([129.156.42.6])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JHF004ZL6GIRP20@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 02 May 2007 08:17:07 -0700 (PDT)
Received: from d1-emea-09.sun.com ([192.18.2.119])
	by gmp-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l42FH6jQ011309	for
 <psarc-ext@sun.com>; Wed, 02 May 2007 15:17:06 +0000 (GMT)
Received: from conversion-daemon.d1-emea-09.sun.com by d1-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 id <0JHF00L016DREK00@d1-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 02 May 2007 16:17:06 +0100 (BST)
Received: from [129.150.120.43] by d1-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 with ESMTPSA id <0JHF00C3L6GH1O40@d1-emea-09.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 02 May 2007 16:17:06 +0100 (BST)
Date: Wed, 02 May 2007 16:17:05 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: PSARC/2007/219 SHA224 support in Cryptographic Framework [ closed
 approved ]
Sender: Darren.Moffat@sun.com
To: psarc-ext@sun.com
Message-id: <4638AB71.9010100@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
User-Agent: Thunderbird 2.0b2 (X11/20070227)
Status: RO
Content-Length: 115

I'm marking this case as closed approved, the timer expired without any 
issues being raised.

-- 
Darren J Moffat

