- Fix CVE-2024-0914 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2024-0914 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2024-0914 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2024-0914 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2024-0914 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Fix CVE-2024-0914 - Upgrade version to 3.24.0 * Add support for FIPS-session mode * Updates to harden against RSA timing attacks * Add option to show the master key verification patterns of secure keys * Add support for exporting a key or certificate as URI-PEM file * Performance improvements for attribute retrieval * Add support for SHA-2 mechanisms * Experimental support for IBM Dilithium via OpenSSL OQS provider * Support live guest relocation for protected key (PKEY) operations * Add support for CKA_ALWAYS_AUTHENTICATE * Add support for CKD_*_SP800 KDFs for ECDH * Add support for SHA based key derivation mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms * Add support for building Opencryptoki on the IBM AIX platform * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64) * Add support for protecting tokens with a token specific user group * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later - Upgrade version to 3.25.0 * Add support for PKCS#11 v3.0 SHAKE key derivation * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms * Add support for CCA AES CIPHER secure key types * Add support for the CKM_ECDH1_DERIVE mechanism * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms * Add support for the CKM_RSA_AES_KEY_WRAP mechanism * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism * Add a tool for import and exporting PKCS#11 keys to a KMIP server * Add support for opaque secure key blob import via C_CreateObject * Add support for key wrapping with AES-GCM * Add support for newer CCA versions on s390x and non-s390x platforms * Add support for CKM_AES_GCM (single-part operations only) - Fix CVE-2026-22791 - Update to 3.26.0 and fix CVE-2026-23893 - Package init - Package init - Package init - Package init - Package init - Package init