opencryptoki-icsftok-3.27.0-1.el9 RPM for aarch64

From CentOS Stream 9 BaseOS for aarch64

Opencryptoki implements the PKCS#11 specification  v3.0 and partially v3.1, v3.2
for a set of cryptographic hardware, such as IBM 4767, 4768, 4769 and 4770
crypto cards, and the Trusted Platform Module (TPM) chip. Opencryptoki also
brings a software token implementation that can be used without any cryptographic
hardware.
This package brings the necessary libraries and files to support
ICSF token in the opencryptoki stack.

Provides

• opencryptoki-icsftok
• libpkcs11_icsf.so.0()(64bit)
• libpkcs11_icsf.so.0(OPENCRYPTOKI_TOK_3.27)(64bit)
• opencryptoki(token)
• opencryptoki-icsftok(aarch-64)

Requires

• ld-linux-aarch64.so.1()(64bit)
• ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcrypto.so.3(OPENSSL_3.4.0)(64bit)
• liblber.so.2()(64bit)
• liblber.so.2(OPENLDAP_2.200)(64bit)
• libldap.so.2()(64bit)
• libldap.so.2(OPENLDAP_2.200)(64bit)
• libpkcs11_icsf.so.0()(64bit)
• opencryptoki-libs(aarch-64) = 3.27.0-1.el9
• opencryptoki-libs(aarch-64) = 3.27.0-1.el9
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

CPL-1.0

Changelog

* Tue Jul 28 2026 Than Ngo <than@redhat.com> - 3.27.0-1
  - Resolves: RHEL-136096, Update to 3.27.0
  - Resolves: RHEL-157524, openCryptoki soft token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-157679, openCryptoki CCA token: support PKCS #11 V3.2 ML-DSA
  - Resolves: RHEL-157806, openCryptoki EP11 token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-169485, openCryptoki: ep11_specific.c syslog warning even for identically configured control points
  - Resolves: RHEL-171563, Fix CVE-2026-40253
* Fri Feb 13 2026 Than Ngo <than@redhat.com> - 3.26.0-2
  - Resolves: RHEL-144821, CVE-2026-23893
* Wed Dec 17 2025 Than Ngo <than@redhat.com> - 3.26.0-1
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0
* Wed Aug 13 2025 Than Ngo <than@redhat.com> - 3.25.0-4
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050
* Mon Jul 21 2025 Than Ngo <than@redhat.com> - 3.25.0-3
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602
* Mon Jul 14 2025 Than Ngo <than@redhat.com> - 3.25.0-2
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock
* Fri Jul 04 2025 Than Ngo <than@redhat.com> - 3.25.0-1
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3
* Wed Apr 09 2025 Than Ngo <than@redhat.com> - 3.24.0-5
  - Related: RHEL-77147, opencryptoki doesn't work in image mode
* Wed Mar 19 2025 Than Ngo <than@redhat.com> - 3.24.0-4
  - Resolves: RHEL-77147, opencryptoki doesn't work in image mode
* Tue Nov 26 2024 Than Ngo <than@redhat.com> - 3.24.0-3
  - Disable ccatok on aarch64
    Related: RHEL-50064
* Thu Nov 07 2024 Than Ngo <than@redhat.com> - 3.24.0-2
  - Fix resource leak
    Related: RHEL-50064
* Tue Oct 22 2024 Than Ngo <than@redhat.com> - 3.24.0-1
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support

Files

/usr/lib/.build-id
/usr/lib/.build-id/26
/usr/lib/.build-id/26/cff5d8404807a2a866a323faffae17ae44a4a3
/usr/lib/.build-id/95
/usr/lib/.build-id/95/7aa58bffce1ee7161ce59b4a4c4f84045c4190
/usr/lib/tmpfiles.d/opencryptoki-icsftok.conf
/usr/lib64/opencryptoki/stdll/PKCS11_ICSF.so
/usr/lib64/opencryptoki/stdll/libpkcs11_icsf.la
/usr/lib64/opencryptoki/stdll/libpkcs11_icsf.so
/usr/lib64/opencryptoki/stdll/libpkcs11_icsf.so.0
/usr/lib64/opencryptoki/stdll/libpkcs11_icsf.so.0.0.0
/usr/sbin/pkcsicsf
/usr/share/doc/opencryptoki-icsftok
/usr/share/doc/opencryptoki-icsftok/README.icsf_stdll
/usr/share/man/man1/pkcsicsf.1.gz
/var/lib/opencryptoki/icsf

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Jul 30 03:38:28 2026