Solaris Cryptographic Framework for System Administrators

This feature is new in the Software Express pilot program. This feature is included in the Solaris 10 3/05 release.

The Solaris Cryptographic Framework provides cryptographic services to applications in the Solaris environment. The system administrator controls which encryption algorithms can be used through the cryptoadm command. The cryptoadm command enables you to perform the following functions:

• Manage available providers of cryptographic services

• Set cryptographic security policy, such as disabling algorithms from a particular provider

The framework comes with plug-ins for the AES, DES/3DES, RC4, MD5, SHA-1, DSA, RSA, and Diffie-Hellman algorithms. Plug-ins can be added or removed as needed.

The encrypt, decrypt, digest, and mac commands all use cryptographic algorithms from the framework.

For further information, see Chapter 13, “Solaris Cryptographic Framework (Overview),” in the System Administration Guide: Security Services.

See also the following man pages:

• cryptoadm(1M)

• kcfd(1M)

• libpkcs11(3LIB)

• pkcs11_kernel(5)

• pkcs11_softtoken(5)