Re: Firefox does not show "Choose Security Device" when requesting certificate

2010-02-09 Thread jomski
We have found the culprit!! Upon checking: https://developer.mozilla.org/en/PKCS11_Implement We found out that setting CKF_WRITE_PROTECTED in the Token Flag, will force NSS to NOT use the Token for Key Generation. Hope this helps to all future PKCS#11 Implementors out there! -- dev-tech-crypto

Re: CKA_SIGN and CKA_VERIFY

2010-02-09 Thread Elio Maldonado
Added comments to https://bugzilla.mozilla.org/show_bug.cgi?id=490238 proposing simplifications to sample 3. -Elio -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: CKA_SIGN and CKA_VERIFY

2010-02-09 Thread Elio Maldonado
On Feb 6, 3:29 am, Shailendra N Jain wrote: >   In the sample that I am working on, I need to decrypt the mac appended > plaintext. But while verifying the MAC, I am using the below context to > call PK11_DigestFinal. > > PK11_CreateContextBySymKey(CKM_MD5_HMAC, CKA_VERIFY, mk, &noParams); Hi Sha