New Mechanisms for the Solaris Cryptographic Framework

This feature is new in the Solaris Express 6/04 release.

The Solaris Cryptographic Framework now supports the following mechanisms for the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols:

• CKM_SSL3_PRE_MASTER_KEY_GEN

• CKM_SSL3_MASTER_KEY_DERIVE

• CKM_SSL3_KEY_AND_MAC_DERIVE

• CKM_SSL3_MASTER_KEY_DERIVE_DH

• CKM_TLS_PRE_MASTER_KEY_GEN

• CKM_TLS_MASTER_KEY_DERIVE

• CKM_TLS_KEY_AND_MAC_DERIVE

• CKM_TLS_MASTER_KEY_DERIVE_DH

The Solaris Cryptographic Framework is an architecture that enables applications in the Solaris system to use or provide cryptographic services. All interactions with the framework are based on the PKCS#11 Cryptographic Token Interface (Cryptoki) from RSA Laboratories, the research arm of RSA Security, Inc.

For more information, see “PKCS #11 Functions: C_GetMechanismList” in the Solaris Security for Developers Guide.