On 01/26/2012 05:08 AM, weizhong qiang wrote:
hi,
Is there a fact that nss does not permit the reading of the attribute
CKA_PRIVATE_EXPONENT, CKA_PRIME_1, etc.?
Because with all of the eight attributes, it is possible to compose the content
of the private key, but the outputting of private key is not allowed in nss?
Thanks and Best Regards,
Weizhong Qiang
These are private attributes. You are correct, applications aren't
allowed to get them. It's bad security hygene to access private
cryptographic components in the application itself, thought it's almost
the first thing new crypto programmers try to do.
My real question here is Why do you want to get the CKA_PRIVATE_EXPONENT?
bob
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto