This has been fixed in the following kernel levels.
- SLES12 (kernel 3.12.36-38.1 and later)
- SLES11 SP3 (kernel 3.0.101-0.47.50.1 and later)
- RHEL 6 (kernel-2.6.32-504.16.2 and later)
Showing posts with label crypto. Show all posts
Showing posts with label crypto. Show all posts
February 19, 2015
Problem with the latest crypto device driver updates on RHEL 6.6 / SLES 11.3 on older hardware
With the introduction of the code for more crypto domains (required for z13) into the service streams of RHEL 6.6 (kernel 2.6.32-504-3.3 and 2.6.32-504.8.1), SLES 11.3 (kernel 3.0.101-42-1) and SLES12 (kernel 3.12.32-33.1) an unfortunate regression has been introduced. The crypto card support for z196 / z114 and older machines is no longer working with the new code. If you are in that situation, please update to the levels below.
This has been fixed in the following kernel levels.
This has been fixed in the following kernel levels.
October 14, 2014
New article: Using Linux on System z Hardware Cryptography with the PKCS#11 Cryoptography Stack
As a follow on to the Java crypto article there is a new one covering PKCS#11 and the System z hardware stack published in the EnterpriseTech Journal.
It explains what PKCS#11 is and how the API works and what methods are supported. Then it covers OpenCryptoki the open source implementation of PKCS#11 and how it's configured and used. This article is for everyone who is seeking better understanding of the exploitation of the hardware crypto facilities from Linux on System z.
It explains what PKCS#11 is and how the API works and what methods are supported. Then it covers OpenCryptoki the open source implementation of PKCS#11 and how it's configured and used. This article is for everyone who is seeking better understanding of the exploitation of the hardware crypto facilities from Linux on System z.
May 2, 2013
New performance whitepaper on exploiting System z crypto hardware with WebSphere 8 for Linux on System z
System z offers hardware accelerations for all kinds of cryptographic operations. The new whitepaper "IBM WebSphere Application Server Version 8 for Linux on IBM System z – SSL Setup and Performance Study" shows how to set up WebSphere and Linux.
The performance numbers are quite impressive, especially for RSA 4096.
The performance numbers are quite impressive, especially for RSA 4096.
April 4, 2013
New article: Using Crypto Hardware with Java in Linux on System z
A new article on how to use the System z crypto hardware from Java inside Linux on System z has been published. The authors describe the available hardware for acceleration, the Linux software stack as it relates to Java. clear key and secure key handling.
However the most instructive part from my perspective is the Java example program and the "howto" description.
However the most instructive part from my perspective is the Java example program and the "howto" description.