On 10/29/2010 03:36 PM, Deepak Kumar wrote: > Rob, thanks for the response. > > This is still a new domain for me, so undoubtedly I'm getting some > terminology mixed up. > > Backing up, and to try and be clear, what I'm trying to do is import a > symmetric AES encryption key into NSS. > OK > >> I've never heard of the nss-symkeyutil. There is a sample app called >> symkeyutil, but last I checked it was incomplete, though there may have >> been some work to get it working. From a tools perspective I don't know >> if there is a way to move an AES symetric key around.. But your question >> was an RSA private key. >> > Good to know, thanks. MacPorts packages the nss tools (including sample apps, > it appears) with the nss- prefix. So the modutil binary is invoked as > nss-modutil, for example. > > I'm able to get des3 keys imported using the symkeyutil tool/app, but it > fails on aes ones with the "nss-symkeyutil: Token Key Gen Failed > nss-symkeyutil: The key does not support the requested operation." error. > If symkeyutil works with des3 but not aes, and it's a reasonably recent version, then you should write a bug against symkeyutil (be sure to use the normal NSS name). Do you know what version of NSS you are using?
bob >
-- dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto
