From darrenm@sac.sfbay.sun.com Thu May 10 03:29:06 2007 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l4AAT6XR000365 for ; Thu, 10 May 2007 03:29:06 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l4AARx42007574; Thu, 10 May 2007 11:28:01 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JHT00A0JMEM7B00@nwk-avmta-2.sfbay.sun.com>; Thu, 10 May 2007 03:27:58 -0700 (PDT) Received: from sfbaymail2sca.sfbay.sun.com ([129.145.155.42]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JHT004ELMEHSXC0@nwk-avmta-2.sfbay.sun.com>; Thu, 10 May 2007 03:27:53 -0700 (PDT) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id l4AARqkD028241; Thu, 10 May 2007 03:27:52 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l4AASuhe000305; Thu, 10 May 2007 03:28:56 -0700 (PDT) Received: (from darrenm@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id l4AASusY000301; Thu, 10 May 2007 03:28:56 -0700 (PDT) Date: Thu, 10 May 2007 03:28:56 -0700 (PDT) From: Darren J Moffat Subject: AES CCM for kernel crypto framework [PSARC/2007/266] To: PSARC-EXT@sun.com Cc: crypto-discuss@opensolaris.org Message-id: <200705101028.l4AASusY000301@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 2552 Template Version: @(#)sac_nextcase %I% %G% SMI 1. Introduction 1.1. Project/Component Working Name: AES CCM for kernel crypto framework 1.2. Name of Document Author/Supplier: Author: Karen Tung 1.3 Date of This Document: 10 May, 2007 4. Technical Description This document proposes the addition of AES CCM mode to the kernel AES software provider in Solaris. The AES CCM implementation will comform to the requirements specified in the National Institue of Standards and Technology (NIST) AES CCM specification and RFC3610. The formating and counter generation functions used in this CCM implementation is the one specified in Appendix A of the NIST document and RFC3610. This implementation also enforces all the length requirements for inputs as specified in the specs. Here are the links to the 2 specifications: http://csrc.nist.gov/publications/nistpubs/800-38C/SP800-38C.pdf http://www.rfc-archive.org/getrfc.php?rfc=3610 The Interface taxonomy is Consolidation Private. The Release taxonomy is Patch/Micro. Diff-marked draft manpages, k-api design, and header files are included in the case directory. Timeout is set to May xx, 2007. 4.0 Background Currently, the kernel AES software provider in Solaris offers ECB, CBC, and counter modes of operation. It does not offer CCM mode. AES CCM mode is needed by the ZFS Crypto project. So, it needs to be added to the kernel AES software module. 4.1 Proposal This document proposes the addition of CCM mode to the existing kernel AES software provider. 4.1.1 Compatibility The name of the mechanism is "CKM_AES_CCM". The name has been reserved by RSA for use by PKCS#11 when AES CCM mode appears in a future revision of the spec. 4.2 Bug/RFE Number(s): 6550326 4.5 Exported Interfaces: +-----------------------------------+------------------------+----------+ | Interface | Classification | comment | +-----------------------------------+------------------------+----------+ | common.h | Consolidation | | | aes_cbc_crypt.h | Private | | +-----------------------------------+------------------------+----------+ 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack From sacadmin Tue May 29 10:50:50 2007 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l4THonxe007086 for ; Tue, 29 May 2007 10:50:50 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id l4THnLdo018573; Tue, 29 May 2007 18:49:29 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JIT00G0RDIEPE00@brm-avmta-1.central.sun.com>; Tue, 29 May 2007 11:49:26 -0600 (MDT) Received: from nwk-ea-fw-1.sun.com ([10.4.134.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JIT00I38DIEOHE0@brm-avmta-1.central.sun.com>; Tue, 29 May 2007 11:49:26 -0600 (MDT) Received: from d1-sfbay-09.sun.com ([192.18.39.119]) by nwk-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l4THnPdG005965; Tue, 29 May 2007 10:49:25 -0700 (PDT) Received: from conversion-daemon.d1-sfbay-09.sun.com by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JIT00G01DFVSO00@d1-sfbay-09.sun.com> (original mail from Sherri.Shieh@Sun.COM); Tue, 29 May 2007 10:49:25 -0700 (PDT) Received: from [129.153.17.193] by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JIT00FYYDI7K2S1@d1-sfbay-09.sun.com>; Tue, 29 May 2007 10:49:19 -0700 (PDT) Date: Tue, 29 May 2007 10:49:19 -0700 From: Sherri Shieh Subject: PSARC Fast Track: AES CCM for kernel crypto framework (2007/266) Sender: Sherri.Shieh@sun.com To: psarc@sun.com, Karen Tung , Darren Moffat Message-id: <465C679F.9000509@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=us-ascii Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en X-PMX-Version: 5.2.0.264296 User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7) Gecko/20070109 Status: RO Content-Length: 351 This case was approved in last week's meeting. I have marked it closed approved. - Sherri -- ========================================================= Sherri Shieh Sun Microsystems, Inc. Program Manager Email: sherri.shieh@sun.com Systems Architecture Phone: 650-786-5245/x85245 ===========================================================