Ruchi Lohani wrote:
> Can anyone point me to the documentation present for pkcs7. 

I'm not sure if you're asking about the standards or the NSS
implementations of the standards (there are multiple of each).

PKCS#7 v 1.5, also known as Cryptographic Message Syntax (CMS),
is RFC 2315.  It was the first in a series of RFCs publishing
various versions of CMS.  It was used in S/MIME V 2, RFC 2311.

It was succeeded by

CMS 1 - RFC 2630  used in S/MIME v 3.0, RFC 2633
CMS 2 - RFC 3369
CMS 3 - RFC 3852, used in S/MIME v 3.1, RFC 3851.

There was also an extension to CMS 1 known as ESS, RFC 2634.

NSS contains two separate libraries that implement versions of CMS.

The functions and typedefs whose names begin with SEC_PKCS7 embody an
implementation of PKCS#7 v1.5.  See a list in
http://mxr.mozilla.org/security/search?string=SEC_PKCS7&find=nss.*h

The functions whose names begin with NSS_CMS and the typedefs whose names
begin with NSSCMS embody an implementation of CMS 1
http://mxr.mozilla.org/security/search?string=NSS_*CMS&find=nss.*h&regexp=1

Today, Thunderbird (which implements S/MIME 3.0) uses the NSS_CMS functions.
NSS internally still uses the older SEC_PKCS7 functions for decoding
signedData messages, which are used to download certificate chains.
http://developer.mozilla.org/En/NSS_Certificate_Download_Specification

> Are there any specific examples present on its usage?

For the SEC_PKCS7 API, there are examples in these files:

http://mxr.mozilla.org/security/source/security/nss/cmd/p7content/p7content.c
http://mxr.mozilla.org/security/source/security/nss/cmd/p7env/p7env.c
http://mxr.mozilla.org/security/source/security/nss/cmd/p7sign/p7sign.c
http://mxr.mozilla.org/security/source/security/nss/cmd/p7verify/p7verify.c
http://mxr.mozilla.org/security/source/security/nss/cmd/signver/pk7print.c
http://mxr.mozilla.org/security/source/security/nss/cmd/signver/signver.c

For the NSS_CMS API, see
http://mxr.mozilla.org/security/source/security/nss/cmd/smimetools/cmsutil.c

> Thanks
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to