Re: NSS set extractable = no

2015-05-19 Thread Arthur Ramsey
Thank you, I will clarify my requirement. I was somewhat suspect of the requirement anyway. On 05/19/2015 11:14 AM, Robert Relyea wrote: On 05/18/2015 03:04 PM, Arthur Ramsey wrote: I have a requirement to disable key export on a key stored in a NSS DB in FIPS mode. I read through the docume

Re: NSS set extractable = no

2015-05-19 Thread Robert Relyea
On 05/18/2015 03:04 PM, Arthur Ramsey wrote: I have a requirement to disable key export on a key stored in a NSS DB in FIPS mode. I read through the documentation and found mention of the ability to do this, but not how. Where can I find information on how to disable key export? I will be us

Re: PK11SymKey in FIPS mode from nothing

2015-05-19 Thread Robert Relyea
On 05/12/2015 10:44 AM, Paul Wouters wrote: On Tue, 12 May 2015, Robert Relyea wrote: So, in FIPS mode, in a standalone test program, what is the correct way to turn g^ir into PK11SymKey. PK11SymKey *sym_key = PK11_ImportSymKey(slot, CKM_DH_PKCS_DERIVE, PK11_OriginUnwrap,