On 03/18/2014 04:29 AM, Leon Brits wrote:
> Robert,
>
> Thanks for your help. This discussion has helped me to find the error in our 
> padding implementation for symmetric ciphers using OpenSSL which defaults to 
> "always pad".
>
> Encryption and decryption via thunderbird now works just fine.

go ahead and right a bug against NSS not calling Final in the error path
for S/MIME as well.

Your semantic is correct for CKM_XXX_CBC_PAD mechanism. NSS only uses
those, however to do private key wrapping.

bob
>
> Thanks
> LJB
>


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to