Re: Hashing functions in Firefox OS

2014-01-15 Thread Garrett Robinson
On 01/15/2014 08:33 AM, Kurt Roeckx wrote: > On 2013-12-17 16:02, Stéphanie Ouillon wrote: >> Hi, >> >> I'm in the Firefox OS Security team and I'm starting working on adding >> support for stronger passwords in the Firefox OS lockscreen (bug 877541) >> [1]. >> At the moment, only a 4-digit passwor

Re: Hashing functions in Firefox OS

2014-01-15 Thread Kurt Roeckx
On 2013-12-17 16:02, Stéphanie Ouillon wrote: Hi, I'm in the Firefox OS Security team and I'm starting working on adding support for stronger passwords in the Firefox OS lockscreen (bug 877541) [1]. At the moment, only a 4-digit password can be configured and we want to improve that for FxOS 1.4

Re: Hashing functions in Firefox OS

2014-01-15 Thread Frederik Braun
On 15.01.2014 14:32, Kai Engert wrote: > It's not clear why you need something new. > > I'd assume your device locking code is privileged code. > Can't you use nsICryptoHash? There is no privileged JS in FxOS as there is in Firefox Desktop :) All code must be an open web API. -- dev-tech-crypto

Re: Hashing functions in Firefox OS

2014-01-15 Thread Kai Engert
On Di, 2013-12-17 at 16:02 +0100, Stéphanie Ouillon wrote: > I'm in the Firefox OS Security team and I'm starting working on adding > support for stronger passwords in the Firefox OS lockscreen (bug 877541) > [1]. > At the moment, only a 4-digit password can be configured and we want to > improve

Re: NSS OCSP stapling tests

2014-01-15 Thread Kai Engert
On Mi, 2014-01-08 at 16:34 -0800, Julien Pierre wrote: > The following still tests are still failing on the internal network on > Linux, though. > > tstclnt: TCP Connection failed: PR_IO_TIMEOUT_ERROR: I/O operation timed out > chains.sh: #2452: Test that OCSP server is reachable - FAILED > > I