ICAINFO-CEX(1)

πŸ“¦ version 4.4.2, in opensuse-leap 16.0

πŸ’… icainfo-cex β€” like, the whole tea on libica-cex crypto

okay so real quick, this page is from the icainfo-cex user manual and it's literally just "hi bestie, here's what crypto libica-cex can actually do" and honestly? iconic.

✨ NAME ✨

icainfo-cex β€” prints out all the info about which cryptographic functions libica-cex supports 🫢

🌸 SYNOPSIS 🌸

icainfo-cex [-v | --version] [-h | --help] [-c | --list-curves] [-r |
--list-rsa] [-f | --list-fips-exceptions]

πŸ’– DESCRIPTION πŸ’–

So icainfo-cex prints a whole table showing what libica-cex supports for various cryptographic algorithms, plus the deets on FIPS support. It's giving "receipts, but for algorithms" ✨

The icainfo-cex output also tells you whether it's in an error state. Like, heads up: algorithms that are not FIPS approved get marked as blocked in every single table column when you're running in FIPS mode. And ngl, when libica is in an error state, all the algorithms get marked as blocked. πŸ’€

The hardware support column situation is split into two, bestie:

  • dynamic hardware = crypto cards
  • static hardware support = CPACF

And software support? That comes via openssl. πŸ¦‹

Oh also β€” if a function is disabled via a build option, you'll see a dash - in the related column. that's your little tell πŸ’…

Here's a shortened sample output so you can vibe check it:

      Cryptographic algorithm support
------------------------------------------------------
               |         hardware        |
 function      |   dynamic  |   static   |  software
---------------+------------+------------+------------
         SHA-1 |     no     |      -     |    -
       SHA-224 |     no     |      -     |    -
       SHA-256 |     no     |      -     |    -
       SHA-384 |     no     |      -     |    -
       SHA-512 |     no     |      -     |    -
         GHASH |     no     |      -     |    -
         P_RNG |  blocked   |      -     |  blocked
  DRBG-SHA-512 |     no     |      -     |    -
        RSA ME |    yes     |      -     |    -
       RSA CRT |    yes     |      -     |    -
           ...
------------------------------------------------------
Built-in FIPS support: FIPS 140-3 mode active.
Software fallbacks are disabled in libica-cex.
CPACF support (including fallbacks) is disabled in libica-cex.

πŸŽ€ OPTIONS πŸŽ€

  • -v or --version β€” shows the libica-cex version and copyright, slay πŸ’œ
  • -h or --help β€” displays this help and bails out
  • -c or --list-curves β€” shows the supported elliptic curves πŸŒ€
  • -r or --list-rsa β€” shows the min and max supported RSA key lengths πŸ”‘
  • -f or --list-fips-exceptions β€” shows the available algorithms that are non-approved (the little rule-breakers πŸ™ˆ)

⭐ RETURN VALUE ⭐

  • 1 β€” unknown or invalid argument on invocation (you did a whoopsie 😭)
  • 0 β€” successful program execution (ate and left no crumbs πŸ‘‘)

🌈 SEE ALSO 🌈

icastats(1)


fr fr, that's the whole page. go forth and check your algorithms, bestie πŸ’…βœ¨

mwah πŸ’‹ β€” this lil manual page is brought to you by IBM, version dated 2022-11-21. catch you in the next man page! πŸ¦‹πŸŽ€

πŸ“¦ where this page comes from