Computing IKEv2's SKEYSEED=PRF(Ni | Nr, {g^ir}) using NSS's CKA_SIGN

Hi, I'm trying to use CKA_SIGN to compute things like: SKEYSEED = PRF(Ni | Nr, {g^ir}) SKEYSEED = PRF({SK_d (old)}, {g^ir (new)} | Ni | Nr) (PRF=HMAC_SHA1 say) where, with my current code: Ni|Nr is raw bytes (nonces put on the wire) {g^ir} and g^ir (new)} are the output from D

TrueKey extension (by Intel) is no longer accepted by Firefox

I get this message when trying to add the extension. Somehow after an update, my True Key app extension is no longer accepted. I've been using it successfully in Firefox for almost a year now. "The owner of downloads.truekey.com has configured their website improperly. To protect your informat

FIPS 140-2 compatible JVM with NSS

Hi, We are trying to generate a FIPS compliant JVM using NSS as our cryptographic provider. We compiled NSS 3.25, JDK 1.8u112 and made the below settings. We removed all other providers from java.security, and left only NSS as provider of JCE and JSSE. Our questions: 1 - Is it actually needed