Thanks Nelson.
And sorry about the subject of the mail. I wanted to ask about that also.
What are the equivalent APIs in NSS which probably can replace the BIO I/O
abstraction of OpenSSL ?


Cheers
Ruchi

On Wed, Aug 20, 2008 at 8:09 PM, Nelson B Bolyard <[EMAIL PROTECTED]>wrote:

> Ruchi Lohani wrote:
> > Can anyone point me to the documentation present for pkcs7.
>
> I'm not sure if you're asking about the standards or the NSS
> implementations of the standards (there are multiple of each).
>
> PKCS#7 v 1.5, also known as Cryptographic Message Syntax (CMS),
> is RFC 2315.  It was the first in a series of RFCs publishing
> various versions of CMS.  It was used in S/MIME V 2, RFC 2311.
>
> It was succeeded by
>
> CMS 1 - RFC 2630  used in S/MIME v 3.0, RFC 2633
> CMS 2 - RFC 3369
> CMS 3 - RFC 3852, used in S/MIME v 3.1, RFC 3851.
>
> There was also an extension to CMS 1 known as ESS, RFC 2634.
>
> NSS contains two separate libraries that implement versions of CMS.
>
> The functions and typedefs whose names begin with SEC_PKCS7 embody an
> implementation of PKCS#7 v1.5.  See a list in
> http://mxr.mozilla.org/security/search?string=SEC_PKCS7&find=nss.*h
>
> The functions whose names begin with NSS_CMS and the typedefs whose names
> begin with NSSCMS embody an implementation of CMS 1
> http://mxr.mozilla.org/security/search?string=NSS_*CMS&find=nss.*h&regexp=1
>
> Today, Thunderbird (which implements S/MIME 3.0) uses the NSS_CMS
> functions.
> NSS internally still uses the older SEC_PKCS7 functions for decoding
> signedData messages, which are used to download certificate chains.
> http://developer.mozilla.org/En/NSS_Certificate_Download_Specification
>
> > Are there any specific examples present on its usage?
>
> For the SEC_PKCS7 API, there are examples in these files:
>
>
> http://mxr.mozilla.org/security/source/security/nss/cmd/p7content/p7content.c
> http://mxr.mozilla.org/security/source/security/nss/cmd/p7env/p7env.c
> http://mxr.mozilla.org/security/source/security/nss/cmd/p7sign/p7sign.c
> http://mxr.mozilla.org/security/source/security/nss/cmd/p7verify/p7verify.c
> http://mxr.mozilla.org/security/source/security/nss/cmd/signver/pk7print.c
> http://mxr.mozilla.org/security/source/security/nss/cmd/signver/signver.c
>
> For the NSS_CMS API, see
>
> http://mxr.mozilla.org/security/source/security/nss/cmd/smimetools/cmsutil.c
>
> > Thanks
> _______________________________________________
> dev-tech-crypto mailing list
> dev-tech-crypto@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-tech-crypto
>
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to