Allan (beaufour), you should be able to build the CFB128 mode yourself using the ECB mode as a primitive. It seems straightforward to me (because 128 is the block size, you don't need to shift). This way you don't need to wait for the support of AES in CFB128 mode in NSS.
The NIST AES validation list is a good way to find out which crypto modules support AES in CFB128 mode: http://csrc.nist.gov/cryptval/aes/aesval.html Wan-Teh _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto