barbican/releasenotes/notes/add-configurable-mechanism-options-2e5c57099b4c91b1.yaml
Ade Lee df8c62aab3 Refactor PKCS#11 to allow configurable mechanisms
Allow for setting the PKCS#11 encryption and hmac algorithms
in the config file.

This patch also implements CKM_AES_CBC encryption and
decryption.

Change-Id: I847b4b17df51bc4846c37a1e19e6adec76f46b38
Co-Authored-By: Ade Lee <alee@redhat.com>
2018-08-10 22:24:34 -05:00

13 lines
428 B
YAML

---
features:
- |
Added new options to the PKCS#11 Cryptographic Plugin configuration to
enable the use of different encryption and hmac mechanisms.
Added support for `CKM_AES_CBC` encryption in the PKCS#11 Cryptographic
Plugin.
deprecations:
- |
Deprecated the `p11_crypto_plugin:algoritm` option. Users should update
their configuration to use `p11_crypto_plugin:encryption_mechanism`
instead.