Persisting symmetric/secret keys with JSS in FIPS mode

2010-09-21 Thread Jason Untulis
Simple question: how? I'm trying AES secret keys with JSS 4.3 and the FIPS certified NSS 3.12.4 in 64-bit Java (compiled my own NSS, JSS jar is stock). Windows (7, Server 2008) at the moment, Linux (CentOS) when this is working. The KeyStore interface theoretically doesn't work[1], even though th

Re: Browser-based RSA encryption/decryption

2010-09-21 Thread Michael Ströder
Martin Paljak wrote: > On Sep 21, 2010, at 12:48 PM, Michael Ströder wrote: >> The keys should be sent from the web app to the browser protected via Shared >> Secret negotiated before. So we would need to access a RSA API functions for >> encryption/decryption from Javascript passing in the RSA key

Re: Browser-based RSA encryption/decryption

2010-09-21 Thread Martin Paljak
Hello, On Sep 21, 2010, at 12:48 PM, Michael Ströder wrote: > The keys should be sent from the web app to the browser protected via Shared > Secret negotiated before. So we would need to access a RSA API functions for > encryption/decryption from Javascript passing in the RSA key blob (probably >

Re: Browser-based RSA encryption/decryption

2010-09-21 Thread Michael Ströder
Martin, thanks for your quick response. Martin Paljak wrote: > On Sep 21, 2010, at 12:19 PM, Michael Ströder wrote: >> We're thinking about doing RSA encryption/decryption within the browser. For >> this application Javascript is assumed to be enabled but we consider using >> Java applets to cause

Re: Browser-based RSA encryption/decryption

2010-09-21 Thread Martin Paljak
Hello, On Sep 21, 2010, at 12:19 PM, Michael Ströder wrote: > We're thinking about doing RSA encryption/decryption within the browser. For > this application Javascript is assumed to be enabled but we consider using > Java applets to cause too much trouble with user support. RSA key size should > b

Browser-based RSA encryption/decryption

2010-09-21 Thread Michael Ströder
HI! We're thinking about doing RSA encryption/decryption within the browser. For this application Javascript is assumed to be enabled but we consider using Java applets to cause too much trouble with user support. RSA key size should be 2048 bits and therefore pure Javascript implementations are m