> -----Original Message----- > From: > [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > la.org] On Behalf Of Nelson B Bolyard > Sent: Tuesday, July 29, 2008 1:41 PM > To: mozilla's crypto code discussion list > Subject: Re: Question about JSS FIPS compliance
> How is software like Sun's Java JCE provider, that is really > a JNI wrapper > for PKCS#11, that is supposed to work with any PKCS#11 > module, supposed > to get FIPS mode operation out of softoken without using non-standard > entry points (at least for _GetFunctionList)? > > (I'm hoping the answer is not: it can't, it must call special > entry points.) I can't comment on specifics, but the SunPKCS11 bridge has a special section/configuration just for using NSS so it's certainly possible that they *are* calling FC_ functions when in fips mode. http://java.sun.com/javase/6/docs/technotes/guides/security/p11guide.htm l#NSS _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
