Here is a list of some of the highlights from an IBM Z perspective:
- Crypto:
- Support for Pervasive Encryption completed:
- To protect data at-rest with protected key dm-crypt, full support of the LUKS2 format adding missing support for the zkey repository and a function (zkey-cryptsetup) to change the master key in the Crypto Express adapter are provided.
- In addition, you can now encrypt swap disks of KVM hosts with protected key dm-crypt without using a Crypto Express adapter.
- The openCryptoki EP11 token now supports the "Bitcoin curve" and RSA OEAP. In addition, the performance of single step cryptography functions and of all functions including hashes in the EP11 token are improved.
- Access of (Docker) containers to Crypto Express resources can now be controlled on a fine granularity.
- zpcictl: When users suspect that a PCI card is malfunctioning, they can use the new tool zpcictl to trigger an error notification and create log entries.
- OSA-Express7S: Link speed of 25GbE models is reported in ethtool and qethqoat.
No comments:
Post a Comment