-----Original Message-----
From: On Behalf Of Nelson B Bolyard
Sent: Tuesday, December 30, 2008 2:25 PM
>> Attempting to create a 128 byte (1024 bit) aes key on the token:
>> C:\nss\fips>symkeyutil -K -n aesKey3 -t aes -s 128 -d .
>> Enter Password or Pin for "NSS FIPS 140-2 Certificate DB":
>> aesKey3              128   1024          aes  <restricted>

>AES has 1024 bit keys?

Yeahhhh, about that.  The first couple times I used symkeyutil to create the 
keys I didn't realize it was asking for the strength in bytes so when I put 128 
I was getting 1024 bit keys.  If it makes you feel any better when I tried to 
actually use it in Java (before I realized what I had done), I got a 
CKR_HOST_MEM error or something like that so It definitely didn't work.

I'll file a bug against NSS 3.12, thanks for looking at this Nelson.

Dave
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to