Performing cryptographic provider failover

1. A method for performing cryptographic provider failover via computer instructions in a storage device of a computer, the method via the computer instructions in the storage device of the computer including:

upon receipt of a first security request, constructing by an integrated cryptographic provider a table comprising a list of a plurality of underlying cryptographic providers for a plurality of service type algorithm pairs on the computer;

wherein the integrated cryptographic provider is one of the plurality of underlying cryptographic providers in the list of the table;

wherein the plurality of underlying cryptographic providers are registered as hardware cryptographic providers and software cryptographic providers in the list of the table; and

wherein the integrated cryptographic provider is registered as a routing cryptographic provider in the list of the table;

arranging the list in the table of the plurality of underlying cryptographic providers so that the integrated cryptographic provider registered as the routing cryptographic provider has the highest priority in the list in the table and so that the plurality of underlying cryptographic providers have a lower priority in the list in the table than the integrated cryptographic provider; and

utilizing the integrated cryptographic provider to specify failover support for all registered service type algorithm pairs using one or more of the plurality of underlying cryptographic providers;

wherein in response to a subsequent security request received from an application, the integrated cryptographic provider being the routing cryptographic provider that constructed the table utilizes the list of the plurality of underlying cryptographic providers to identify a second cryptographic provider to which the request will be routed if a first cryptographic provider fails.

2. The method of claim 1 wherein the integrated cryptographic provider comprises a routing cryptographic provider.

3. The method of claim 1 wherein the one or more underlying cryptographic providers includes a hardware provider.

4. The method of claim 1 wherein the one or more underlying cryptographic providers includes at least one of a hardware provider, a software provider, or a firmware provider.

5. The method of claim 1 further including the integrated cryptographic provider performing a check to ensure that a security request satisfies a set of requirements before routing the request to the one or more underlying cryptographic providers.

6. The method of claim 1 further including the integrated cryptographic provider performing a check to ascertain whether or not hardware is available.

7. The method of claim 1 further including the integrated cryptographic provider checking one or more key sizes.

8. The method of claim 1 further including the integrated cryptographic provider checking one or more key types.

9. A computer program product for performing cryptographic provider failover, the computer program product comprising a non-transitory computer readable storage medium for storing instructions which, when executed on a computer, causes the computer to perform a method comprising:

upon receipt of a first security request, constructing by the integrated cryptographic provider a table comprising a list of a plurality of underlying cryptographic providers for a plurality of service type algorithm pairs on the computer;

wherein the integrated cryptographic provider is one of the plurality of underlying cryptographic providers in the list of the table;

wherein the plurality of underlying cryptographic providers are registered as hardware cryptographic providers and software cryptographic providers in the list of the table; and

wherein the integrated cryptographic provider is registered as a routing cryptographic provider in the list of the table;

arranging the list in the table of the plurality of underlying cryptographic providers so that the integrated cryptographic provider registered as the routing cryptographic provider has the highest priority in the list in the table and so that the plurality of underlying cryptographic providers have a lower priority in the list in the table than the integrated cryptographic provider; and

utilizing the integrated cryptographic provider to specify failover support for all registered service type algorithm pairs using one or more of the plurality of the underlying cryptographic providers;

wherein in response to a subsequent security request received from an application, the integrated cryptographic provider being the routing cryptographic provider that constructed the table utilizes the list of the plurality of underlying cryptographic providers to identify a second cryptographic provider to which the request will be routed if a first cryptographic provider fails.

10. The computer program product of claim 9 wherein the integrated cryptographic provider comprises a routing cryptographic provider.

11. The computer program product of claim 9 wherein the one or more underlying cryptographic providers includes a hardware provider.

12. The computer program product of claim 9 wherein the one or more underlying cryptographic providers includes at least one of a hardware provider, a software provider, or a firmware provider.

13. The computer program product of claim 9 further including instructions for the integrated cryptographic provider performing a check to ensure that a security request satisfies a set of requirements before routing the request to the one or more underlying cryptographic providers.

14. The computer program product of claim 9 further including instructions for the integrated cryptographic provider performing a check to ascertain whether or not hardware is available.

15. The computer program product of claim 9 further including instructions for the integrated cryptographic provider checking one or more key sizes.

16. The computer program product of claim 9 further including instructions for the integrated cryptographic provider checking one or more key types.