> You're right on one count, NSS and PKCS11 are large complicated systems. > NSS actually comprises quite a bit more than PKCS11. PKCS11 is a > standard promulgated by RSA for managing cryptographic tokens. NSS > amongst other things provides API's which are compatible with the PKCS11 > API's. NSS also implements support for the SSL/TLS protocols, > certificate management, PKI infrastructure, and exposes API's which are > the building blocks of those larger components.
So it is true that just because something uses NSS (specifically the PKCS11 part) that does not imply that they using some particular encryption algorithm? I'd have to look further into the project that using the PKCS11 to see what particular algorithm they are using for their encryption. > As for the compile errors, I suspect you might be using an old version > of NSS, what version do you have? Yes this was probably the issue. I upgraded my Debian system to the next version (didn't realize I was behind a version) and this fixed the compile error I was referring to earlier. Before I spend much more time on getting the pytho-nss module working I think I'll try a more direct approach as you suggest. As far as getting the source code to compile and install it looks like the only remaining issue is that the install part puts things in a directory that is not "standard" on Debian so probably a minor change to the location where it outputs the .so and the .py files and it would work. I may look into that later. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto