See https://bugzilla.mozilla.org/show_bug.cgi?id=601645.
The following internal functions and data structures in FreeBL that would be used Firefox 4.0 Sync's J-PAKE implementation through JSCtypes (a mechanism for calling native code through Javascript). I personally would like to find a way to avoid calling these internal functions from within Firefox--especially since there's no way to detect incompatibilities at compile-time and because the interface to these functions isn't frozen. We might also have the option of rewriting the J-PAKE implementation in C, include it in NSS, and making the J-PAKE functionality part of the public API of NSS. Another option would be to rewrite it in C, add it to NSS, but only enable it in a special (Firefox-specific) configuration of FreeBL. The default option seems to be to keep accessing these internal functions and data structures through JavaScript, and rely on NSS distributors to not change them. I am eager to hear others' suggestions. Note that Sync's design is fundamentally incompatible with FIPS mode and consequently there's no need to consider FIPS mode concerns. We will just disable Sync (or require the user to disable it) in FIPS mode. Cheers, Brian SHA1Context SHA1_Hash SHA1_HashBuf SHA1_NewContext SHA1_DestroyContext SHA1_Begin SHA1_Update SHA1_End mp_sign mp_size mp_err mp_digit mp_int mp_init mp_clear mp_set mp_sub_d mp_sub mp_cmp mp_cmp_d mp_mod mp_addmod mp_submod mp_mulmod mp_exptmod mp_read_raw mp_raw_size mp_toraw mp_read_radix mp_radix_size mp_toradix -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto