-----Original Message----- From: On Behalf Of Nelson B Bolyard Sent: Tuesday, December 30, 2008 2:25 PM >> Attempting to create a 128 byte (1024 bit) aes key on the token: >> C:\nss\fips>symkeyutil -K -n aesKey3 -t aes -s 128 -d . >> Enter Password or Pin for "NSS FIPS 140-2 Certificate DB": >> aesKey3 128 1024 aes <restricted>
>AES has 1024 bit keys? Yeahhhh, about that. The first couple times I used symkeyutil to create the keys I didn't realize it was asking for the strength in bytes so when I put 128 I was getting 1024 bit keys. If it makes you feel any better when I tried to actually use it in Java (before I realized what I had done), I got a CKR_HOST_MEM error or something like that so It definitely didn't work. I'll file a bug against NSS 3.12, thanks for looking at this Nelson. Dave _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto