Re: Interested in reviving PSS support in NSS

2015-02-15 Thread Brian Smith
Ryan Sleevi wrote: > - It assumes all the parameters can be expressed via a SECOidTag. That > is, it's missing hash alg, mgf alg, salt length (e.g. the > RSASSA-PSS-params construction) I believe there are only a small number of (hashAlgorithm, mgf alg, salt length) combinations that need to be

Re: Interested in reviving PSS support in NSS

2015-02-15 Thread Brian Smith
[+antoine] Hanno Böck wrote: > Unfortunately the code never got fully merged. Right now the state is > that code for the basic functions exists in freebl, but all upper layer > code is not merged. There are multiple "upper layers" and, depending on your goals, some should be prioritized higher t

Re: Interested in reviving PSS support in NSS

2015-02-15 Thread Ryan Sleevi
On Sun, February 15, 2015 3:07 pm, Hanno Böck wrote: > Unfortunately the code never got fully merged. Right now the state is > that code for the basic functions exists in freebl, but all upper layer > code is not merged. I think if I remember correctly the code currently > in freebl will also

Interested in reviving PSS support in NSS

2015-02-15 Thread Hanno Böck
Hi, A couple of years ago I participated in a summer of code project for NSS to create an implementation of the RSA-PSS signature scheme für X.509 signatures. Unfortunately the code never got fully merged. Right now the state is that code for the basic functions exists in freebl, but all upper la